PT-2020-1993 · Cisco · Cisco Fxos

Name of the Vulnerable Software and Affected Versions: Cisco FXOS Software affected versions not specified Description: The issue is related to insufficient input validation in the CLI of Cisco FXOS Software, allowing an authenticated, local attacker to read or write arbitrary files on the...

Directory traversal vulnerability in ad***_te***.php file of PiPiCMS PiPi Movie & TV Collection program

PiPiCMS PiPi Movie and TV Collection Program is a movie and TV station building program based on PHP+MySQL. A directory traversal vulnerability exists in the adte.php file of PiPiCMS PiPi Movie and TV Collection Program. An attacker can use the vulnerability to access the directory of any website...

CVE-2020-3937

SQL Injection in SysJust Syuan-Gu-Da-Shih, versions before 20191223, allowing attackers to perform unwanted SQL queries and access arbitrary file in the database...

CVE-2020-3926

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API parameter...

CVE-2020-3927

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API parameter...

CVE-2020-3927

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API parameter...

CVE-2020-3926

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API parameter...

Improper access control

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API parameter...

Improper access control

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API parameter...

CVE-2020-3926 ServiSign Windows Versions- Arbitrary File Access

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API parameter...

CVE-2020-3927 ServiSign Windows Versions- Arbitrary File Deletion

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API parameter...

CVE-2020-3927

The CVE-2020-3927 entry concerns a vulnerability in the ServiSign security plugin that could allow an attacker to access arbitrary files on the target system by manipulating a crafted API parameter, provided the attacker knows the specific API function. This is supported by the NVD entry describi...

CVE-2020-3926

The CVE-2020-3926 entry concerns the ServiSign security plugin. Affected component: the security plugin’s API handling. Vulnerability: arbitrary-file-access through crafted API parameters when an attacker knows the specific API function. Impact: potential disclosure or write access to arbitrary f...

CVE-2015-5071

AR System Mid Tier in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary files via the report parameter of the BIRT viewer servlet...

The vulnerability of Huawei routers stems from insufficient validation of input data. This allows attackers to gain access to arbitrary files and upload those files onto vulnerable devices.

The vulnerability of Huawei routers exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to gain access to arbitrary files and upload those files to the vulnerable device...

Multiple vulnerabilities in Cybozu Office

Overview Cybozu Office provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Directory traversal in the "Customapp" function CWE-22 - CVE-2019-6022 Browse restriction bypass in the application "Address" CWE-284 - CVE-2019-6023 Two vulnerabilities were reported by the following...

Siemens SPPA-T3000 Improper Authentication Vulnerability

The SPPA-T3000 is a distributed control system mainly used in thermal power plants and large renewable energy power plants. A security vulnerability exists in the Siemens SPPA-T3000. It allows an attacker with network access to the MS3000 server to read and write arbitrary files on the local file...

The vulnerability of the FTP server of the EKRA 200 series micro-processor terminal allows a hacker to gain access to arbitrary data in the file system.

The vulnerability of the FTP server of the EKRA 200 series micro-processor terminals is related to security flaws in their mechanisms. Exploiting this vulnerability allows a malicious actor to gain access to arbitrary files on the file system using the RETR command...

ZTE ZXR10 1800-2S suffers from a file read vulnerability (CNVD-2019-46613)

The ZXR10 1800-2S is a router product from China's ZTE Corporation ZTE. A file read vulnerability exists in the ZTE ZXR10 1800-2S. An attacker can exploit this vulnerability to read arbitrary files...

ZTE ZXR10 1800-2S suffers from a file read vulnerability (CNVD-2019-46614)

The ZXR10 1800-2S is a router product from China's ZTE Corporation ZTE. A file read vulnerability exists in the ZTE ZXR10 1800-2S. An attacker can exploit this vulnerability to read arbitrary files...