Design/Logic Flaw

Lanling OA Landray Office Automation OA internal patch number 133383/137780 contains an arbitrary file read vulnerability via the component /sys/ui/extend/varkind/custom.jsp...

CVE-2022-34924

Lanling OA Landray Office Automation OA internal patch number 133383/137780 contains an arbitrary file read vulnerability via the component /sys/ui/extend/varkind/custom.jsp...

CVE-2022-34924

CVE-2022-34924 affects Lanling OA Landray Office Automation (OA). The vulnerability is an arbitrary file read located in the component /sys/ui/extend/varkind/custom.jsp, as described across multiple sources (NVD/Red Hat/CVE list). The available documents do not specify a patch version or remediat...

Lanling OA 安全漏洞

Lanling OA is an OA management system from the Chinese company Lanling. A security vulnerability exists in Lanling OA Landray Office Automation OA. An attacker can exploit this vulnerability to read arbitrary files via the component /sys/ui/extend/varkind/custom.jsp...

PT-2022-22436 · Landray · Lanling Oa Landray Office Automation

Name of the Vulnerable Software and Affected Versions: Lanling OA Landray Office Automation OA affected versions not specified Description: The issue is related to an arbitrary file read vulnerability. It affects the component /sys/ui/extend/varkind/custom.jsp. There is no information provided...

WordPress Team plugin <= 4.1.1 - Authenticated Arbitrary File Read and Deletion vulnerability

Authenticated Arbitrary File Read and Deletion vulnerability discovered by Nhật Nam in WordPress Team plugin versions = 4.1.1. Solution Update the WordPress Team plugin to the latest available version at least 4.1.2...

The vulnerability of the Cisco IOx software platform arises from an incorrect limitation on the path name to the restricted access directory. This allows a malicious individual to read or write arbitrary files within the system.

The vulnerability of the Cisco IOx software platform exists due to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability allows a malicious actor to remotely read or write arbitrary files in the system by sending a specially crafted HTTP reques...

CVE-2022-34593

DPTech VPN v8.1.28.0 was discovered to contain an arbitrary file read vulnerability...

CVE-2022-34593

DPTech VPN v8.1.28.0 was discovered to contain an arbitrary file read vulnerability...

CVE-2022-34593

DPTech VPN v8.1.28.0 was discovered to contain an arbitrary file read vulnerability...

CVE-2022-34593

CVE-2022-34593 affects DPTech VPN v8.1.28.0, with an arbitrary file read vulnerability. The available documents consistently report this vulnerability in DPTech VPN 8.1.28.0, but do not provide concrete details on the underlying root cause, exploit method, affected components beyond the product v...

CVE-2022-34593

DPTech VPN v8.1.28.0 was discovered to contain an arbitrary file read vulnerability...

CVE-2022-36997

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 and related NetBackup products. An attacker with authenticated access to a NetBackup Client could remotely trigger impacts that include arbitrary file read,...

CVE-2022-36997

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 and related NetBackup products. An attacker with authenticated access to a NetBackup Client could remotely trigger impacts that include arbitrary file read,...

CVE-2022-36994

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 and related NetBackup products. An attacker with authenticated access to a NetBackup Client could arbitrarily read files from a NetBackup Primary server...

Server side request forgery (ssrf)

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 and related NetBackup products. An attacker with authenticated access to a NetBackup Client could remotely trigger impacts that include arbitrary file read,...

DPTech VPN 安全漏洞

DPTech VPN is a VPN software from the Chinese company DPTech. A security vulnerability exists in DPTech VPN version v8.1.28.0, which stems from an arbitrary file read vulnerability...

PT-2022-22224 · Unknown · Dptech Vpn

Name of the Vulnerable Software and Affected Versions: DPTech VPN version 8.1.28.0 Description: The issue is related to an arbitrary file read vulnerability. Recommendations: For DPTech VPN version 8.1.28.0, at the moment, there is no information about a newer version that contains a fix for this...

WordPress Team Members Showcase < 4.1.2 - Subscriber+ Arbitrary File Read and Deletion

The plugin contains a file which could allow any authenticated users to download arbitrary files from the server via a path traversal vector. Furthermore, the file will also be deleted after its content is returned to the user...

WordPress Team Members Showcase < 4.1.2 - Subscriber+ Arbitrary File Read and Deletion

The plugin contains a file which could allow any authenticated users to download arbitrary files from the server via a path traversal vector. Furthermore, the file will also be deleted after its content is returned to the user PoC...