KLA10668 File access vulnerability in QlikTech QlikView

XML external entity vulnerability was found in QlikView at AccessPoint.aspx. By exploiting this vulnerability malicious users can read arbitrary files. This vulnerability can be exploited remotely via a specially designed xml data. Original advisories - Exploitation Public exploits exist for this...

Apple iOS Sensitive File Access Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS suffers from a security vulnerability that allows malicious applications to provide special afc commands that utilize symbolic links to access protected portions of the file system...

CVE-2015-1195

The V2 API in OpenStack Image Registry and Delivery Service Glance before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticated users to read or delete arbitrary files via a full pathname in a filesystem: URL in the image location property. NOTE: this vulnerability exists because of a...

CVE-2014-4629

EMC Documentum Content Server is affected by an Insecure Direct Object Reference (IDOR) vulnerability (CVE-2014-4629) in versions 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19. The issue allows remote authenticated attackers to read or delete arbitrary files via unspecified vectors. Remediation...

Novell Groupwise 2014 < 2014 SP1 File Access Vulnerability - Active Check

Novell Groupwise is prone to an arbitrary file access vulnerability. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Specialist by Templatic - CSRF File Upload

The specialist WordPress theme was affected by a Templatic Theme CSRF File Upload security vulnerability. File Access: https://example.com/wp-content/themes/specialist/images/tmp/yourshell.php...

QNAP Turbo NAS TS-1279U-RP Multiple Path Injection

No description provided by source. Exploit Title: QNAP Turbo NAS Multiple Path Injection Date: 2012-09-04 Exploit Author: Andrea Fabrizi Vendor Homepage: http://www.qnap.com/ Version: = 3.7.3 build 20120801 Tested on: QNAP TS-1279U-RP This vulnerability has been discovered on QNAP TS-1279U-RP, bu...

Google Hack Honeypot File Upload Manager 1.3 'delall' Unauthorized File Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27877/info Google Hack Honeypot File Upload Manager is prone to an unauthorized file-access vulnerability. This issue occurs because the application fails to validate users before processing a certain HTTP request...

Critical: Red Hat Security Advisory: java-1.7.0-openjdk security update

Updated java-1.7.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CVE-2011-3153

dmrc.c in Light Display Manager aka LightDM before 1.1.1 allows local users to read arbitrary files via a symlink attack on /.dmrc...

CVE-2013-1881

GNOME libsvg before 2.39.0 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

XtreamerPRO Media Server 'dir' Parameter Multiple Directory Traversal Vulnerabilities

XtreamerPRO Media Server is prone to multiple directory traversal vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

SuSE 11.1 Security Update : rdesktop (SAT Patch Number 4547)

The following bug has been fixed : - A malicious server could access any file on clients connecting to it if the client shared some ressource. CVE-2011-1595 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 upda...

CVE-2011-1595

CVE-2011-1595 affects rdesktop up to version 1.6.x (before 1.7.0). The vulnerability is a directory traversal in the disk_create function (disk.c) when disk redirection is enabled, allowing a remote RDP server to read or overwrite arbitrary files via a .. path element. Impact is partial confident...

AFP Server Directory Traversal

The remote AFP server allows guest users to read files located outside public shares by sending requests to the '..' directory. An attacker could use this flaw to read every file on this host. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid45374; scriptversion "1.11...

CVE-2010-0790

sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint name...

[Full-disclosure] CORE-2009-0519 - Awingsoft Awakening Winds3D Viewer remote command execution vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Awingsoft Awakening Winds3D Viewer remote command execution vulnerability 1. Advisory Information Title: Awingsoft Awakening Winds3D Viewer remote command execution...

CVE-2008-5936

CVE-2008-5936 affects front-end/edit.php in mini-pub 0.3 and earlier. The vulnerability allows remote attackers to read files and obtain PHP source code by manipulating the sFileName parameter, exposing partial confidentiality impact. The CVSS score is provided as 5.0 (MEDIUM) with network vector...

Apple Safari RSS Feed Information Disclosure Vulnerability

The host is running Apple Safari web browser which is prone to remote file access vulnerability. OpenVAS Vulnerability Test $Id: gbapplesafariinfodiscvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Apple Safari RSS Feed Information Disclosure Vulnerability Authors: Nikita MR Copyright: Copyright c...

Admidio 1.4.8 (getfile.php) Remote File Disclosure Vulnerability

No description provided by source. /---------------------------------------------------------------\ + + + Admidio 1.4.8 Remote File Disclosure + + + ---------------------------------------------------------------/ Author : n3v3rh00d, http://forum.antichat.ru Download :...