Arbitrary File Read

libflatpak.so is vulnerable to arbitrary file read. The use of custom formated .desktop files allows an attacker escape sandbox restrictions to gain access to files on the host system...

Arbitrary File Read Vulnerability in Hangzhou CUHK Netcallserver Management Console

Founded in 1993, Hangzhou Xinzhongda Technology Co., Ltd. is a professional information technology solution provider in the fields of project management, intelligent construction, financial and tax management, and government finance management. An arbitrary file read vulnerability exists in the...

Arbitrary File Read Vulnerability in Panmicro's e-message Management Interface

Ltd. was founded in 2001, headquartered in Shanghai, focusing on the field of collaborative management software, and is committed to collaborative OA as the core to help enterprises build a unified mobile office platform. An arbitrary file read vulnerability exists in the Panmicro e-message...

NewStart CGSL MAIN 6.02 : grafana Multiple Vulnerabilities (NS-SA-2021-0066)

The remote NewStart CGSL host, running version MAIN 6.02, has grafana packages installed that are affected by multiple vulnerabilities: - An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are...

Cisco SD-WAN vManage Software 安全漏洞

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. A security vulnerability exists in Cisco SD-WAN vManage Software that allows an authenticated, remote attacker to read arbitrary files on the underlying file system of an...

Arbitrary File Read Vulnerability in SPAdmin

SPAdmin is a backend management system can be quickly developed , integrated with rich third-party APP , the core technology SpringBoot, JPA, Shiro. SPAdmin has an arbitrary file read vulnerability, attackers can use this vulnerability to obtain sensitive information...

EPrints Arbitrary File Read Vulnerability (CNVD-2021-14737)

EPrints is a free open source software package for building open access repositories compliant with the OAI-PMH protocol. An arbitrary file read vulnerability exists in EPrints 3.4.2. A remote attacker can exploit this vulnerability by entering a specially crafted LaTeX into cgi/latex2png?latex=...

Atlassian Confluence < 6.13.18 / 6.14 < 7.4.6 / 7.5 < 7.8.3 Arbitrary File Read (CONFSERVER-60469)

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 6.13.18, 6.14.x prior to 7.4.6 or 7.5.x prior to 7.8.3. It is, therefore, affected by an arbitrary file read vulnerability in its ConfluenceResourceDownloadRewriteRule class...

Arbitrary File Read Vulnerability in SIYUCMS

SIYUCMS is a content management system based on ThinkPHP + AdminLTE. SIYUCMS suffers from an arbitrary file read vulnerability that can be exploited by an attacker to read arbitrary files...

Atlassian Jira < 8.5.11 / 8.13.3 / 8.15.0 Arbitrary File Read (JRASERVER-72014)

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.11, 8.13.3, or 8.15.0. It is, therefore, affected by limited arbitrary file read vulnerability related to the 'CachingResourceDownloadReadwriteRule' class due to an improp...

Arbitrary File Read Vulnerability in Streaming Media Management Server of Hangzhou Hikvision Digital Technology Co.

Hangzhou Hikvision System Technology Co., Ltd. is a provider of security products and industry solutions. An arbitrary file read vulnerability exists in the streaming media management server of Hangzhou Hikvision Digital Technology Co. Ltd, which can be exploited by attackers to read sensitive...

CVE-2021-21064

Magento UPWARD-php version 1.1.4 and earlier is affected by a Path traversal vulnerability in Magento UPWARD Connector version 1.1.2 and earlier due to the upload feature. An attacker could potentially exploit this vulnerability to upload a malicious YAML file that can contain instructions which...

Arbitrary File Read Vulnerability in RSR Router of Riptide Networks Co.

Ltd. is a company mainly engaged in information system integration services; Internet virtual private network services; Internet management services and other items. An arbitrary file read vulnerability exists in the RSR router of Ruijie Networks Corporation, which can be exploited by an attacker...

Samsung router WLAN APs suffer from arbitrary file read vulnerability

Samsung China Investment Co., Ltd. is the headquarters of Samsung Group in China. By the end of 2008, 20 out of more than 30 companies under Samsung have invested in China, including Samsung Electronics, Samsung SDI, Samsung SDS and Samsung Electro-Mechanics. An arbitrary file read vulnerability...

RHEL 8 : OpenShift Container Platform 4.6.17 (RHSA-2021:0423)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:0423 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or privat...

jenkins: Arbitrary file read vulnerability in workspace browsers

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces and archived artifacts by following symlinks...

CVE-2020-35566

An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. An attacker can read arbitrary JSON files via Local File Inclusion...

CVE-2021-21475

Under specific circumstances SAP Master Data Management, versions - 710, 710.750, allows an unauthorized attacker to exploit insufficient validation of path information provided by users, thus characters representing 'traverse to parent directory' are passed through to the file APIs. Due to this...

Security Bulletin: IBM QRadar SIEM is vulnerable to Arbitrary File Read (CVE-2020-4789)

Summary IBM QRadar SIEM is vulnerable to Arbitrary File Read Vulnerability Details CVEID: CVE-2020-4789 DESCRIPTION: IBM QRadar could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view...

Serv-U FTP Server < 15.2.2 Hotfix 1 Arbitrary File Read/Write

In SolarWinds Serv-U before 15.2.2 Hotfix 1, there is a directory containing user profile files that include users' password hashes that is world readable and writable. An unprivileged Windows user having access to the server's filesystem can add an FTP user by copying a valid profile file to thi...