7353 matches found
Micro Focus Service Desk Arbitrary File Read Vulnerability
Micro Focus Service Desk formerly Novell Service Desk is a service management solution for monitoring and resolving service issues from Micro Focus in the UK. The solution provides incident management, problem management, service catalog definition and management, financial management, knowledge...
CVE-2016-4004
Directory traversal vulnerability in Dell OpenManage Server Administrator OMSA 8.2 allows remote authenticated administrators to read arbitrary files via a ..\ dot dot backslash in the file parameter to ViewFile...
PT-2016-5023
Name of the Vulnerable Software and Affected Versions OpenStack Compute Nova versions prior to 2015.1.4 kilo OpenStack Compute Nova versions 12.0.x prior to 12.0.3 liberty Description The issue allows remote authenticated users to read arbitrary files via a crafted qcow2 header in an ephemeral or...
DotCMS Directory Traversal Vulnerability
DotCMS is a content management system CMS from the American company DotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A directory traversal vulnerability exists in the com.dotmarketing.servlets.taillog.TailLogServlet.class file i...
Monsta Box WebFTP Arbitrary File Read
Application ----------- "MONSTA Box is a lightweight open-source file manager you can install on your website or server to easily manage your files through any browser." Description from the official website http://www.monstahq.com/ Vulnerability ------------- The Monsta Box WebFTP application...
SAP NetWeaver Java AS Directory Traversal Vulnerability
SAP NetWeaver is SAP's integrated technology platform and the technology foundation for all SAP applications since SAP Business Suite. A directory traversal vulnerability exists in SAP NetWeaver Java AS version 7.4, which can be exploited by remote attackers to read arbitrary files...
PLANET Technology IP Surveillance Cameras - Multiple Vulnerabilities
PLANET Technology IP Surveillance Cameras - Multiple Vulnerabilities | | | | | | | | | | | | / | '\ \ /\ / / \ | | |/ | ' / | | | | \ V V / / | | | | | | \ \ /|| // ||||,|./|/ Security Adivisory 2016-04-06 www.orwelllabs.com Twitter:@orwelllabs mantra: ...not affect a product that is in...
PLANET Technology IP Surveillance Cameras - Multiple Vulnerabilities
| | | | | | | | | | | | / | '\ \ /\ / / \ | | |/ | ' / | | | | \ V V / / | | | | | | \ \ /|| // ||||,|./|/ Security Adivisory 2016-04-06 www.orwelllabs.com Twitter:@orwelllabs mantra: ...not affect a product that is in scope for... AhHum! Overview ======== Technical Risk: high Likelihood of...
KingCms v9 /api/conn.php 目录遍历及任意文件读取漏洞（无需截断）
No description provided by source...
CVE-2016-1789
Apple iBooks Author before 2.4.1 allows remote attackers to read arbitrary files via an iBooks Author file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...
D-Link 2750u/2730u /cgi-bin/webproc 任意文件读取
No description provided by source...
Apache OpenMeetings FileService Arbitrary File Read Vulnerability
Apache OpenMeetings is the United States Apache Apache Software Foundation developed a set of multi-language customizable video conferencing and collaboration system, which supports audio, video and allows users to view each participant's desktop and so on. An Arbitrary File Read Exposure...
The vulnerability of the application interface of IBM WebSphere Portal servers allows a hacker to trigger a service failure or read arbitrary files.
The vulnerability of the XML parser in the IBM WebSphere Portal user interface relates to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to read arbitrary files or cause service failures by declaring external links that are related ...
蝉知企业门户 control.php 任意文件读取漏洞
No description provided by source...
The vulnerability of the SAP Mobile Platform, a platform for developing mobile applications, allows a hacker to read arbitrary files.
The vulnerability of the SAP Mobile Platform for developing mobile applications is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to read arbitrary files using a specially created XML request...
汇文Libsys 5.0 /zplug/ajax_asyn_link.old.php 任意文件读取漏洞
No description provided by source...
Didiwiki directory traversal vulnerability
didiwiki is a Wikipedia implementation written in C by software developer Matthew Allum, which is primarily used for personal records such as notes and to-do lists. A directory traversal vulnerability exists in didiwiki's wiki.c file, which stems from the failure of the api/page/get URI to...
D-Link DVG-N5402SP Directory Traversal Vulnerability
The D-Link DVG-N5402SP is a wireless router product from AUO D-Link for voice, fax and shared wireless Internet over IP networks. A directory traversal vulnerability exists in the D-Link DVG-N5402SP. An attacker can exploit this vulnerability to read arbitrary files...
CVE-2016-0882
EMC Documentum xCP is affected: versions 2.1 before patch 23 and 2.2 before patch 11 are vulnerable to a XML External Entity (XXE) issue. The vulnerability enables remote authenticated users to read arbitrary files by sending a POST request containing an XML external entity declaration combined w...
Roundcube Absolute Path Traversal Vulnerability
RoundCube Webmail is a browser-based IMAP client that supports address book management, message searching, spell checking and more. An absolute path traversal vulnerability exists in the program/steps/addressbook/photo.inc file in RoundCube Webmail, which allows remote attackers to read arbitrary...