WordPress MiwoFTP Plugin Arbitrary File Download

An arbitrary file download vulnerability exists in Wordpress MiwoFTP Plugin. The vulnerability is due to a parameter arriving from user input, which is not properly sanitized. By using a specially crafted HTTP request, a remote attacker might gain access to arbitrary files...

HPSBGN3547 rev.2 - HP Device Manager, Remote Read Access to Arbitrary Files

Potential Security Impact Remote read access to arbitrary files. Source: HP, HP Product Security Response Team PSRT VULNERABILITY SUMMARY Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. dot dot in the...

Ubuntu 12.04 LTS : pam regression (USN-2935-3)

USN-2935-1 fixed vulnerabilities in PAM. The updates contained a packaging change that prevented upgrades in certain multiarch environments. USN-2935-2 intended to fix the problem but was incomplete for Ubuntu 12.04 LTS. This update fixes the problem in Ubuntu 12.04 LTS. We apologize for the...

The vulnerability of the Ruby on Rails software platform, which allows a hacker to read arbitrary files

The vulnerability of the Action View component in the Ruby on Rails software framework is related to deficiencies in path name restrictions. Exploiting this vulnerability allows an attacker, operating remotely, to read arbitrary files by using the application’s path name with the “..” symbol...

Ubuntu: Security Advisory (USN-2935-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

samba: Incorrect ACL get/set allowed on symlink path

A flaw was found in the way Samba handled ACLs on symbolic links. An authenticated user could use this flaw to gain access to an arbitrary file or directory by overwriting its ACL...

samba: Incorrect ACL get/set allowed on symlink path

A flaw was found in the way Samba handled ACLs on symbolic links. An authenticated user could use this flaw to gain access to an arbitrary file or directory by overwriting its ACL...

Kaltura Community Edition 11.1.0-2 Code Execution / File Upload / File Read

, , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. Kaltura Community Edition Multiple Vulnerabilities Affected versions: Kaltura Community Edition =11.1.0-2 PDF:...

Imgur: Local file read in image editor

Filepaths were able to traverse up outside of their intended directory when using the /edit/process API endpoint. Insufficient imageid filtration in image editor allowed an attacker to read arbitrary files. An attacker could read files by setting file path in imageid GET param in /edit/process AP...

The vulnerability of the Zarafa Collaboration Platform, a collaborative work platform that allows a hacker to modify arbitrary files.

The vulnerability in the provider/server/ECServer.cpp file of the Zarafa Collaboration Platform-related platform is related to an incorrect definition of references before accessing the file. Exploiting this vulnerability allows a malicious individual to modify any files by manipulating symbolic...

openssh: command injection

Missing sanitisation of untrusted input allows an authenticated user who is able to request X11 forwarding to inject commands to xauth. Injection of xauth commands grants the ability to read arbitrary files under the authenticated user's privilege. Other xauth commands allow limited information...

Background FUSE provides an interface for filesystems implemented in userspace. Description The fusermount binary calls setuidgeteuid to reset the RUID when it invokes /bin/mount so that it can use privileged mount options that are normally restricted if RUID != EUID. FUSE does not properly clear...

PT-2016-5014 · Ruby +1 · Ruby On Rails +1

Name of the Vulnerable Software and Affected Versions: Ruby on Rails versions 3.2.22.1 and earlier Ruby on Rails versions 4.1.14.1 and earlier Description: A directory traversal issue in Action View allows remote attackers to read arbitrary files by providing a .. dot dot in a pathname, leveragin...

VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2011-0008) (remote check)

The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities : - A directory traversal vulnerability exists that allows a remote attacker to read arbitrary files. CVE-2011-0426 - An information disclosure vulnerability exists due to...

CVE-2016-1358

Cisco Prime Infrastructure 2.2, 3.0, and 3.10.0 allows remote authenticated users to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, aka Bug ID...

Xxe

Cisco Prime Infrastructure 2.2, 3.0, and 3.10.0 allows remote authenticated users to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, aka Bug ID...

IBM WebSphere Application Server Information Disclosure Vulnerability (swg21671835)

IBM WebSphere Application Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Pivotal Software Cloud Foundry Elastic Runtime Unauthorized Operation Vulnerability

Pivotal Software Cloud Foundry is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software that provides container scheduling, continuous delivery, and automated service deployment.Elastic Runtime is Pivotal Cloud Foundry's A runtime environment. A security...

PHP 5.4.44, 5.5.x < 5.5.28, 5.6.x < 5.6.12 Multiple Vulnerabilities (Mar 2016) - Windows

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

CVE-2016-0245

The XML parser in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF10 allows remote authenticated users to read arbitrary files or cause a denial of service via an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE...