8067 matches found
U.S. Dept Of Defense: Unauthenticated File Read Adobe ColdFusion
A vulnerability allowing unauthenticated arbitrary file read in Adobe ColdFusion was discovered. This could result in unauthorized access to sensitive data on affected systems. The vulnerability impacts ColdFusion versions 2021 Update 5 and earlier, and 2018 Update 15 and earlier. Mitigation is t...
CVE-2023-34259
Kyocera TASKalfa 4053ci printers through 2VGS000.002.561 allow /wlmdeu%2f%2e%2e%2f%2e%2e directory traversal to read arbitrary files on the filesystem, even files that require root privileges. NOTE: this issue exists because of an incomplete fix for CVE-2020-23575...
CVE-2023-2622
Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call RPC of the InspectSetup service endpoint. The low privilege client is then allowed to read arbitrary files that they do not have authorization to read...
Arbitrary File Read Vulnerability in Teaching Affairs Integration System of Hunan Qiangzhi Technology Development Co.
Founded in 2002, Hunan Strong Intelligence Technology Development Co., Ltd. is a leading provider of educational informatization services in the industry. Ltd. is a leading provider of educational informatization services. An arbitrary file read vulnerability exists in the Hunan Strong Intelligen...
PT-2023-20547 · Unknown · Inspectsetup
Name of the Vulnerable Software and Affected Versions: InspectSetup service affected versions not specified Description: The issue allows authenticated clients to read arbitrary files on the MAIN Computer system using the remote procedure call RPC of the InspectSetup service endpoint. This enable...
Peppermint Security Vulnerabilities
Peppermint is an open source ticket management system from Peppermint Labs. A security vulnerability exists in Peppermint Ticket Management version 0.2.4 and earlier versions. A remote attacker can exploit this vulnerability to read an arbitrary file via a...
CVE-2023-46863
Peppermint Ticket Management before 0.2.4 allows remote attackers to read arbitrary files via a /api/v1/users/file/download?filepath=./../ POST request...
GHSA-9GGW-H9MF-4JH7 Jenkins CloudBees CD Plugin vulnerable to arbitrary file read
Jenkins CloudBees CD Plugin temporarily copies files from an agent workspace to the controller in preparation for publishing them in the 'CloudBees CD - Publish Artifact' post-build step. CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the temporary directory...
Jenkins CloudBees CD Plugin vulnerable to arbitrary file read
Jenkins CloudBees CD Plugin temporarily copies files from an agent workspace to the controller in preparation for publishing them in the 'CloudBees CD - Publish Artifact' post-build step. CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the temporary directory...
CVE-2023-26580
Unauthenticated arbitrary file read in the IDAttend’s IDWeb application 3.1.013 allows the retrieval of any file present on the web server by unauthenticated attackers...
CVE-2023-26580
The vulnerability CVE-2023-26580 affects IDAttend’s IDWeb application 3.1.013, allowing unauthenticated arbitrary file read and access to files on the web server. Documented impact specifies unauthenticated access with high confidentiality impact (C: High, I: None, A: None) and network/low comple...
CVE-2023-33517
carRental 1.0 is vulnerable to Incorrect Access Control Arbitrary File Read on the Back-end System...
CVE-2023-33517
carRental 1.0 is vulnerable to Incorrect Access Control Arbitrary File Read on the Back-end System...
CVE-2023-33517
carRental 1.0 is vulnerable to Incorrect Access Control Arbitrary File Read on the Back-end System...
CVE-2023-37532
HCL Commerce Remote Store server could allow a remote attacker, using a specially-crafted URL, to read arbitrary files on the system...
Arbitrary File Read
github.com/artifacthub/hub is vulnerable to Arbitrary File Read. The vulnerability is due to a lack of proper validation whether a file is a symbolic link or not. This flaw enables an attacker to read arbitrary files in the system, potentially leading to the leakage of sensitive information when...
CVE-2023-33517
carRental 1.0 is vulnerable to Incorrect Access Control Arbitrary File Read on the Back-end System...
HCL Technologies HCL Commerce 路径遍历漏洞
HCL Technologies Commerce is a software platform framework for e-commerce from HCL Technologies, USA. The software includes marketing, sales, customer and order processing functionality in a customizable and integrated package. A directory traversal vulnerability exists in HCL Technologies...
PT-2023-24373 · Unknown · Car Rental
Name of the Vulnerable Software and Affected Versions: carRental version 1.0 Description: The issue is related to Incorrect Access Control, allowing for Arbitrary File Read on the Back-end System. Recommendations: For carRental version 1.0, at the moment, there is no information about a newer...
