Tomas Buchaillot Tyk API Gateway 路径遍历漏洞

Tomas Buchaillot Tyk API Gateway is Tomas Buchaillot an open source application . It is an open source enterprise API gateway that supports REST, GraphQL, TCP and gRPC protocols. Tomas Buchaillot Tyk API Gateway suffers from a path traversal vulnerability that stems from directory traversal by th...

The vulnerability in the implementation of the IPv6 protocol in the Trace TCP/IP stack allows a attacker to read arbitrary files.

The vulnerability of the IPv6 implementation in the Trace TCP/IP stack is related to insufficient validation of input data during packet processing. Exploiting this vulnerability allows a malicious actor to read arbitrary files...

Western Digital MyCloud PR4100 Link Resolution Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Western Digital MyCloud PR4100. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SMB and AFP services. By creating a symbolic link, an attacke...

Weseek GROWI 路径遍历漏洞

GROWI is a team collaboration software. A path traversal vulnerability exists in WESEEK GROWI 4.2.2 and earlier versions, which can be exploited to read arbitrary paths via a specially crafted URL...

Weseek GROWI 路径遍历漏洞

GROWI is a team collaboration software. A path traversal vulnerability exists in WESEEK GROWI 4.2.2 and earlier versions, which can be exploited to read and/or delete arbitrary paths by sending a specially crafted request...

EulerOS Virtualization 3.0.6.6 : libtar (EulerOS-SA-2021-1491)

According to the version of the libtar package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Multiple directory traversal vulnerabilities in the 1 tarextractglob and 2 tarextractall functions in libtar 1.2.20 and earlier allow...

Dell EMC OpenManage Server Administrator 路径遍历漏洞

OpenManage Server Administrator OMSA is a software agent that provides a comprehensive, one-to-one system management solution in two ways: first, through an integrated, Web browser-based graphical user interface GUI; and second, through a command line interface CLI displayed by the operating...

CVE-2021-26703

EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted JSON/XML input to a cgi/ajax/phrase URI...

CVE-2021-3342

EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted LaTeX input to a cgi/latex2png?latex= URI...

Input validation

EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted JSON/XML input to a cgi/ajax/phrase URI...

Input validation

EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted LaTeX input to a cgi/latex2png?latex= URI...

CVE-2021-3342

EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted LaTeX input to a cgi/latex2png?latex= URI...

CVE-2021-3342

CVE-2021-3342 affects EPrints 3.4.2 and allows remote attackers to read arbitrary files and potentially execute commands by supplying crafted LaTeX to the cgi/latex2png?latex= URI. The connected documents corroborate an arbitrary file read vulnerability in EPrints 3.4.2 with remote access via the...

CVE-2020-36240

The ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0 before 4.1.2 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check...

CVE-2021-21514

Dell EMC OpenManage Server Administrator OMSA versions 9.5 and prior contain a path traversal vulnerability. A remote user with admin privileges could potentially exploit this vulnerability to view arbitrary files on the target system by sending a specially crafted URL request...

CVE-2021-1361 Cisco NX-OS Software Unauthenticated Arbitrary File Actions Vulnerability

A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode that are running Cisco NX-OS Software could allow an unauthenticated, remote attacker to create, delete, or overwrite...

CVE-2021-20661

Directory traversal vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows authenticated attackers to delete arbitrary files and/or directories on the server via unspecified vectors...

CVE-2021-20659

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors. If the file is PHP script, an attacker may execute arbitrary code...

Code injection

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors. If the file is PHP script, an attacker may execute arbitrary code...

CVE-2021-20659

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors. If the file is PHP script, an attacker may execute arbitrary code...