CVE-2023-7260

Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitrarily access files on the system...

CVE-2023-7260

Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitrarily access files on the system...

CVE-2024-36440

Swissphone DiCal-RED 4009 devices are affected by CVE-2024-36440 due to use of unsalted MD5 for the administrative password. An attacker with access to /etc/deviceconfig can recover the admin password through password-cracking, exposing high confidentiality and integrity impact as noted in the CV...

PT-2024-15257

Name of the Vulnerable Software and Affected Versions OpenText CX-E Voice versions through 22.4 Description A Path Traversal vulnerability has been discovered, which could allow arbitrary access to files on the system. Recommendations For versions through 22.4, update to a version later than 22.4...

OpenText CX-E Voice 安全漏洞

OpenText CX-E Voice is a voice application from OpenText Canada. A security vulnerability exists in OpenText CX-E Voice version 22.4 and prior versions that originates from allowing access to arbitrary files on the system...

GO-2022-0584 Arbitrary file reads in HashiCorp Nomad in github.com/hashicorp/nomad

Arbitrary file reads in HashiCorp Nomad in github.com/hashicorp/nomad...

CVE-2023-49198

CVE-2023-49198 : Arbitrary file read in Apache SeaTunnel Web due to MySQL URL parameters (allowLoadLocalInfile, allowUrlInLocalInfile, allowLoadLocalInfileInPath, maxAllowedPacket). Affected: SeaTunnel 1.0.0; fix: upgrade to 1.0.1. Multiple connected sources corroborate the issue and remediation;...

CVE-2023-5505

The BackWPup plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.0.1 via the job-specific backup folder. This allows authenticated attackers to store backups in arbitrary folders on the server provided they can be written to by the server. Additionally,...

Adobe Commerce Path Traversal Vulnerability

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A path traversal vulnerability exists in Adobe Commerce. The vulnerability stems from the program failing to properly filter for specific elements in a...

Adobe Commerce Directory Traversal Vulnerability (CNVD-2024-44534)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce suffers from a directory traversal vulnerability that could be exploited by an attacker to access files and directories outside of a...

CVE-2024-42472 Flatpak may allow access to files outside sandbox for certain apps

Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious or compromised Flatpak app using persistent directories could access and write files outside of what it would otherwise have access to, which is an attack on integrity and...

CVE-2024-42472 Flatpak may allow access to files outside sandbox for certain apps

Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious or compromised Flatpak app using persistent directories could access and write files outside of what it would otherwise have access to, which is an attack on integrity and...

jenkins: Arbitrary file read vulnerability through agent connections can lead to RCE

A vulnerability was found in the Remoting library in Jenkins core, which handles communication between the Jenkins controller and agents. The ClassLoaderProxyfetchJar function may allow malicious agents or attackers with Agent/Connect permission to read arbitrary files from the Jenkins controller...

The software’s vulnerability involves errors in PT Application Inspector, particularly regarding the incorrect handling of links before accessing files. This allows attackers to escalate their privileges and gain unauthorized access to protected information.

The vulnerability of the PT Application Inspector’s software for detecting vulnerabilities and errors is related to incorrect definition of the link before accessing a file. Exploiting this vulnerability allows an attacker to enhance their privileges and gain unauthorized access to protected...

Adobe Commerce 路径遍历漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A path traversal vulnerability exists in Adobe Commerce. The vulnerability stems from the program failing to properly filter for specific elements in a...

CVE-2024-41905

A vulnerability has been identified in SINEC Traffic Analyzer 6GK8822-1BG01-0BA0 All versions V2.0. The affected application do not have access control for accessing the files. This could allow an authenticated attacker with low privilege's to get access to sensitive information...

PT-2024-5741 · Microsoft · Officeplus

Name of the Vulnerable Software and Affected Versions: Microsoft OfficePlus affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. It involves incorrect handling of symbolic links before accessing a file, which could allow an attacker to...

Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

CVE-2024-7693

Raiden MAILD Remote Management System from Team Johnlong Software has a Relative Path Traversal vulnerability, allowing unauthenticated remote attackers to read arbitrary file on the remote server...

CVE-2024-21876

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability via a URL parameter in Enphase IQ Gateway formerly known as Envoy allows an unautheticated attacker to access or create arbitratry files.This issue affects Envoy: from 4.x to 8.x and 8.2.4225...