276 matches found
PortlandLabs Concrete Cms 代码问题漏洞
PortlandLabs Concrete Cms is a team-oriented open source content management system for the United States PortlandLabs . A path traversal vulnerability exists in PortlandLabs Concrete CMS, which stems from the product's failure to securely handle user input data. The vulnerability can be exploited...
JUMP 路径遍历漏洞
JUMP is an asset management solution from the French company JUMP. A security vulnerability exists in JUMP AMS version 3.6.0.04.009-2487, which stems from the application improperly restricting the loading of files on the server's file system, making it vulnerable to arbitrary file reads...
Dell Wyse Management Suite 路径遍历漏洞
DELL Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints from Dell USA. The product includes centralized Wyse endpoint management, asset tracking, and automated device discovery.Wyse Management Suite 3.2 and prior versions contain a security vulnerability that...
CVE-2021-29475 PDF export allows arbitrary file reads
HedgeDoc formerly known as CodiMD is an open-source collaborative markdown editor. An attacker is able to receive arbitrary files from the file system when exporting a note to PDF. Since the code injection has to take place as note content, there fore this exploit requires the attackers ability t...
Cisco SD-WAN vManage 后置链接漏洞
Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. Cisco SD-WAN vManage suffers from a backlink vulnerability that stems from an insufficient file range restriction. An attacker could exploit...
jenkins: Arbitrary file read vulnerability in workspace browsers
Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces and archived artifacts by following symlinks...
CVE-2020-24625
Unathenticated directory traversal in the ReceiverServlet class doGet method can lead to arbitrary file reads in HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9...
Directory traversal
Unathenticated directory traversal in the ReceiverServlet class doGet method can lead to arbitrary file reads in HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9...
CVE-2020-24624
Unathenticated directory traversal in the DownloadServlet class execute method can lead to arbitrary file reads in HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9...
CVE-2020-24625
Unathenticated directory traversal in the ReceiverServlet class doGet method can lead to arbitrary file reads in HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9...
CVE-2020-24625
Summary: CVE-2020-24625 is an unauthenticated directory traversal vulnerability in the ReceiverServlet doGet() of Hewlett Packard Enterprise Pay per Use (PPU) Utility Computing Service (UCS) Meter, up to version 1.9 (vulnerability exists prior to 1.9). The root cause is lack of proper validation ...
CVE-2020-24624
CVE-2020-24624 describes an unauthenticated directory traversal in the DownloadServlet class’s execute() method on Hewlett Packard Enterprise’s Pay Per Use (PPU) Utility Computing Service (UCS) Meter, v1.9. The vulnerability allows an attacker to read arbitrary files via an improper validation of...
CVE-2020-24625: Improper Limitation of a Pathname to a Restricted Directory
Unathenticated directory traversal in the ReceiverServlet class doGet method can lead to arbitrary file reads in HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9...
CVE-2020-5916
In BIG-IP versions 15.1.0-15.1.0.4 and 15.0.0-15.0.1.3 the Certificate Administrator user role and higher privileged roles can perform arbitrary file reads outside of the web root directory...
CVE-2020-5916
In BIG-IP versions 15.1.0-15.1.0.4 and 15.0.0-15.0.1.3 the Certificate Administrator user role and higher privileged roles can perform arbitrary file reads outside of the web root directory...
CVE-2020-5916
CVE-2020-5916 affects F5 BIG-IP: certificates admin and higher privileged roles can read arbitrary files outside the web root via the BIG-IP Configuration utility. Affects BIG-IP versions 15.1.0–15.1.0.4 and 15.0.0–15.0.1. The root cause is improper enforcement of file read permissions in the Con...
ZTE ZXR10 1800-2S suffers from a file read vulnerability (CNVD-2019-46634)
The ZXR10 1800-2S is a router product from China's ZTE Corporation ZTE. A file read vulnerability exists in the ZTE ZXR10 1800-2S. An attacker can exploit this vulnerability to read arbitrary files...
Deserialization of untrusted data in FasterXML jackson-databind
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9. When Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint and the service has JDOM 1.x or 2.x jar in the classpath, an attacker can send a specificall...
The vulnerability of the Intel Graphics Driver lies in its lack of proper input data validation, allowing attackers to gain access to and read arbitrary files.
The vulnerability of the Kernel Mode Driver component in Intel Graphics Drivers exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to gain access to and read arbitrary files...
