CVE-2016-1434

The license-certificate upload functionality on Cisco 8800 phones with software 11.01 allows remote authenticated users to delete arbitrary files via an invalid file, aka Bug ID CSCuz03010...

CVE-2016-1434

The license-certificate upload functionality on Cisco 8800 phones with software 11.01 allows remote authenticated users to delete arbitrary files via an invalid file, aka Bug ID CSCuz03010...

Code injection

The license-certificate upload functionality on Cisco 8800 phones with software 11.01 allows remote authenticated users to delete arbitrary files via an invalid file, aka Bug ID CSCuz03010...

Design/Logic Flaw

Cisco 8800 phones with software 11.01 do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014...

CVE-2016-1435

Cisco 8800 phones with software 11.01 do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014...

CVE-2016-1434

The license-certificate upload functionality on Cisco 8800 phones with software 11.01 allows remote authenticated users to delete arbitrary files via an invalid file, aka Bug ID CSCuz03010...

QlikView Server AccessPoint XML External Entity Injection

The version of QlikView Server running on the remote host is 11.20 prior to 11.20 SR12. It is, therefore, affected by an XML external entity XXE injection vulnerability, specifically DTD parameter injection, in the /AccessPoint.aspx script due to an incorrectly configured XML parser accepting XML...

Elastic Logstash 'CVE-2015-4152' Directory Traversal Vulnerability

Elastic Logstash is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-1225

Trend Micro Internet Security 8 and 10 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2016-1225

Trend Micro Internet Security 8 and 10 allows remote attackers to read arbitrary files via unspecified vectors...

Code injection

Trend Micro Internet Security 8 and 10 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2016-1225

CVE-2016-1225 affects Trend Micro Internet Security 8 and 10. The connected sources describe an access-restriction vulnerability that allows a remote attacker to obtain access to files on the device (read arbitrary files) via networked vectors, with the impact described primarily as confidentiali...

CVE-2016-1225

Trend Micro Internet Security 8 and 10 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2016-4814

Directory traversal vulnerability in kml2jsonp.php in Geospatial Information Authority of Japan aka GSI OldGSIMaps before January 2015 on Windows allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2016-1223

Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-Free Business Security 9.0 allows remote attackers to read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability on BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices with firmware 2.16 and earlier allows remote attackers to read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-Free Business Security 9.0 allows remote attackers to read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in kml2jsonp.php in Geospatial Information Authority of Japan aka GSI OldGSIMaps before January 2015 on Windows allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2016-4814

Directory traversal vulnerability in kml2jsonp.php in Geospatial Information Authority of Japan aka GSI OldGSIMaps before January 2015 on Windows allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2016-4814

The CVE-2016-4814 entry concerns Old_GSI_Maps (Geospatial Information Authority of Japan) prior to January 2015 on Windows, where kml2jsonp.php contains a directory traversal flaw. This allows remote attackers to read arbitrary files from the server. Root cause is directory traversal in kml2jsonp...