2557 matches found
Arbitrary File Access
guard-livereload is vulnerable to arbitrary file access. Anyone who can connect to a port can read files that are available to the user running the livereload server...
Multiple Delta Electronics Products Arbitrary File Access Vulnerability
Delta Electronics WPLSoft and others are software control platforms used by Delta Electronics to edit the Delta DVP series of programmable logic controllers PLCs. An arbitrary file access vulnerability exists in multiple Delta Electronics products. An attacker could exploit the vulnerability to...
UBUNTU-CVE-2016-9565
MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796...
CVE-2016-9208
A vulnerability in the File Management Utility, the Download File form, and the Serviceability application of Cisco Emergency Responder could allow an authenticated, remote attacker to access files in arbitrary locations on the file system of an affected device. More Information: CSCva98951...
PHP FormMail Generator Security Bypass Vulnerability (CNVD-2016-12387)
PHP FormMail Generator is a suite of PHP applications for generating standard web forms for inclusion in PHP or WordPress websites. A security bypass vulnerability exists in PHP FormMail Generator. The vulnerability stems from the program incorrectly detecting a folder directory entered by the...
Red Hat Drools Directory Traversal Vulnerability
Red Hat Drools is the United States Red Hat Red Hat, Inc. of a set of open source based on the RETE algorithm business rules management system BRMS solution. The program provides a core business rules engine BRE, Web authoring and rules management applications Drools Workbench and for the core...
XXE External Entity Injection Vulnerability in Hikvision Elisa Live IP camera
Hangzhou Hikvision Digital Technology Co. Elisa Live IP camera is a network camera. Hikvision Elisa Live IP camera suffers from XXE external entity injection vulnerability. An attacker can exploit the vulnerability to obtain arbitrary files on a website, and in severe cases, obtain server control...
DWebPro 8.4.2 Local File Inclusion Vulnerability
DWebPro is a dynamic web site software package for distribution on CD/DVD or USB drives. A local file inclusion vulnerability exists in the start parameter of DWebPro, which allows an attacker to access arbitrary files and, when browsing to an executable file, execute the file with system...
CVE-2016-7560
CVE-2016-7560 affects Fortinet FortiWLC: the rsyncd server in FortiWLC versions up to 8.2-4-0 uses a hardcoded rsync account, enabling remote attackers to read or write arbitrary files via unspecified vectors. This vulnerability stems from the hardcoded credential/account in the rsync service, wi...
IBM Spectrum Control and IBM Storage Insights Catalog Traversal Vulnerability
IBM Spectrum Control and IBM Storage Insights are both storage resource management software from IBM USA. A directory traversal vulnerability exists in IBM Spectrum Control versions 5.2.8 through 5.2.10.1 and IBM Storage Insights. An attacker can exploit this vulnerability by sending a URL reques...
Directory Traversal Vulnerability in QEMU File Handling
QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A directory traversal vulnerability exists in QEMU. As the program fails to adequately filter user-submitted input. An attacker can leverage the directory traversal...
Moodle 2.4.x < 2.4.1 Multiple Vulnerabilities
Binary data 9414.prm...
Microsoft .NET Framework Information Disclosure Vulnerability (CNVD-2016-04935)
Microsoft .NET Framework is a comprehensive and consistent programming model developed by Microsoft Corporation USA and a development platform for building Windows, Windows Store, Windows Phone, Windows Server and Microsoft Azure Windows Store, Windows Phone, Windows Server, and Microsoft Azure...
The vulnerability of the antivirus software Internet Security allows a hacker to read arbitrary files.
The vulnerability of the antivirus software Internet Security is related to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files...
The vulnerability of the Business Process Manager system allows a perpetrator to read arbitrary files.
The vulnerability of the Business Process Manager system exists due to an incorrect restriction on the name of the path leading to the restricted access catalog. Exploiting this vulnerability allows a malicious actor, operating remotely, to read arbitrary files using a specially crafted URL...
The vulnerability of the Cisco Unified Communications Manager software allows a malicious individual to gain access to confidential information.
The GNU Bash command shell, as of version 4.3 bash43-025 and later, incorrectly handles lines that follow the declaration of a specially crafted function, which is exported as a variable. This allows a malicious actor to read and write arbitrary files, as well as perform other unconfirmed actions...
Vulnerability of Cisco ACS software, allowing a malicious individual to access confidential information
The GNU Bash command shell, as of version 4.3 bash43-025, incorrectly handles lines that follow the declaration of a specially crafted function, which is exported as a variable. This allows a malicious actor to read and write arbitrary files, as well as perform other unconfirmed actions. Security...
The vulnerability of Cisco IPS software allows a malicious individual to gain access to confidential information.
The GNU Bash command shell, as of version 4.3 bash43-025, incorrectly handles lines that follow the declaration of a specially crafted function, which is exported as a variable. This allows a malicious actor to read and write arbitrary files, as well as perform other unconfirmed actions. Security...