CVE-2021-32833

Emby Server is a personal media server with apps on many devices. In Emby Server on Windows there is a set of arbitrary file read vulnerabilities. This vulnerability is known to exist in version 4.6.4.0 and may not be patched in later versions. Known vulnerable routes are...

Design/Logic Flaw

Emby Server is a personal media server with apps on many devices. In Emby Server on Windows there is a set of arbitrary file read vulnerabilities. This vulnerability is known to exist in version 4.6.4.0 and may not be patched in later versions. Known vulnerable routes are...

CVE-2021-32833

Emby Server is a personal media server with apps on many devices. In Emby Server on Windows there is a set of arbitrary file read vulnerabilities. This vulnerability is known to exist in version 4.6.4.0 and may not be patched in later versions. Known vulnerable routes are...

CVE-2021-32833

CVE-2021-32833 affects Emby Server on Windows, with arbitrary file read vulnerabilities disclosed in version 4.6.4.0 and possibly not patched in later versions. Publicly referenced vulnerable routes include: /Videos/Id/hls/PlaylistId/SegmentId.SegmentContainer, /Images/Ratings/theme/name, and /Im...

Emby Server 安全漏洞

Emby Server is a personal media server software that supports storing, managing, and streaming personal media content with support for multiple device access. An arbitrary file read vulnerability exists in Emby Server that originates from Emby Server on Windows not properly restricting access to...

Cisco IOS XR 参数注入漏洞

Cisco IOS XR Software is an operating system developed by Cisco for its network devices.Cisco IOS XR Software is vulnerable to an arbitrary file read/write vulnerability that could be exploited by attackers to overwrite and read arbitrary files on local devices...

Directory Traversal

Overview convert-svg-core is a package that supports converting SVG into another format using headless Chromium. Affected versions of this package are vulnerable to Directory Traversal. Using a specially crafted SVG file, an attacker could read arbitrary files from the file system and then show t...

Directory Traversal

Overview convert-svg-to-png is a package for converting SVG to PNG using headless Chromium. Affected versions of this package are vulnerable to Directory Traversal. Using a specially crafted SVG file, an attacker could read arbitrary files from the file system and then show the file content as a...

Directory Traversal

Overview convert-svg-to-jpeg is a package for converting SVG to JPEG using headless Chromium. Affected versions of this package are vulnerable to Directory Traversal. Using a specially crafted SVG file, an attacker could read arbitrary files from the file system and then show the file content as ...

Xiaomi Mi WiFi suffers from an arbitrary file read vulnerability

Founded on March 3, 2010, Xiaomi Technology Co., Ltd. is a globalized mobile Internet enterprise focusing on the research and development of smart hardware and electronic products, as well as an innovative technology enterprise focusing on the construction of high-end smartphones, Internet TVs an...

GHSA-RPQ8-MMWH-Q9HM Directory traversal in Eclipse Mojarra

Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter...

CVE-2021-39109

The renderWidgetResource resource in Atlasian Atlasboard before version 1.1.9 allows remote attackers to read arbitrary files via a path traversal vulnerability...

CVE-2021-36233

The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows by design an authenticated attacker to read arbitrary files from the filesystem by specifying the file path...

CVE-2021-35219

ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability using ImportAlert function within the Alerts Settings page...

CVE-2021-35219

ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability using ImportAlert function within the Alerts Settings page...

CVE-2021-35219

ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability using ImportAlert function within the Alerts Settings page...

Information disclosure

ExportToPdfCmd Arbitrary File Read Information Disclosure Vulnerability using ImportAlert function within the Alerts Settings page...

CVE-2021-35219

SolarWinds Orion Platform prior to 2020.2.6 HF1 is affected by CVE-2021-35219: ExportToPdfCmd Arbitrary File Read via the ImportAlert function in the Alerts Settings page. The vulnerability allows an authenticated, remote attacker to read arbitrary files. Remediation is to upgrade to 2020.2.6 HF1...

SolarWinds Orion Platform 安全漏洞

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user comments, and a mapped view of the entire network. A...

CVE-2021-22022

The vRealize Operations Manager API 8.x prior to 8.5 contains an arbitrary file read vulnerability. A malicious actor with administrative access to vRealize Operations Manager API can read any arbitrary file on server leading to information disclosure...