7508 matches found
CVE-2020-3796
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an improper access control vulnerability. Successful exploitation could lead to system file structure disclosure...
Improper access control
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an improper access control vulnerability. Successful exploitation could lead to system file structure disclosure...
CVE-2020-3796
CVE-2020-3796 affects Adobe ColdFusion 2016 and ColdFusion 2018. The root cause is improper access control that could allow an attacker to disclose the underlying system file structure. Affected products include ColdFusion 2016 before update 15 and ColdFusion 2018 before update 9 (per APSB20-18 a...
Microsoft IIS Tilde Character Short File/Folder Name Disclosure
Microsoft Internet Information Server IIS suffers from a vulnerability which allows the detection of short names of files and directories which have en equivalent in the 8.3 version of the file naming scheme. By crafting specific requests containing the tilde '' character, an attacker could...
CVE-2019-20855: Undefined Security Weakness
An issue was discovered in Mattermost Server before 5.16.1, 5.15.2, 5.14.5, and 5.9.6. It allows attackers to obtain sensitive information local files during legacy attachment migration...
CVE-2020-13268
GitLab CVE-2020-13268 affects GitLab CE/EE 12.10 through 13.0.1. A specially crafted request could confirm the existence of files stored in object storage without disclosing their contents, exposing partial confidentiality (C for confidentiality; I and A not affected per the source). The vulnerab...
CVE-2020-13268
Removed by vendor...
Schneider Electric Easergy T300 Firmware Disclosure
The vulnerability in the protection of controller firmware for automated transformer substations of Schneider Electric Easergy T300 HU250 is related to the leakage of information about files and directories. Exploiting this vulnerability allows a malicious actor to disclose the protected...
Arbitrary File Read Vulnerability in WMCMS
WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS arbitrary file reading vulnerability, an attacker can exploit the vulnerability to read files under the server...
Joomla XCloner Backup 3.5.3 - Local File Disclosure
Joomla XCloner Backup version 3.5.3 suffers from a local file disclosure vulnerability. Exploit Title: Joomla XCloner Backup - Authenticated Local File Disclosure Date: 10.05.2020 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Exploit-Db Author ID: 8763 Reference:...
CVE-2020-11949: Undefined Security Weakness
testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x and before XXXXX-VVTK-0XXXXBeta2 allows an authenticated user to obtain arbitrary files from a camera's local filesystem. For example, this affects IT9388-HT devices...
CVE-2020-12392
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can be controlled by the website. If a user used the 'Copy as cURL' feature and pasted the command into a terminal, it could have resulted in the disclosure of local files. This...
DEBIAN-CVE-2020-12392
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can be controlled by the website. If a user used the 'Copy as cURL' feature and pasted the command into a terminal, it could have resulted in the disclosure of local files. This...
CVE-2020-12392: Improper Limitation of a Pathname to a Restricted Directory
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can be controlled by the website. If a user used the 'Copy as cURL' feature and pasted the command into a terminal, it could have resulted in the disclosure of local files. This...
xcloner,3.53,Other
xcloner,3.53,Other Developer statement Today we have made available a new release — version 3.5.4 — for the unmaintained Joomla version of XCloner. Prior versions of XCloner for Joomla contained an Authenticated Local File Disclosure vulnerability that has been patched in the latest version. Any...
CVE-2020-13424
The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure...
CVE-2020-13424
The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure...
Arbitrary file deletion
The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure...
CVE-2020-13424
CVE-2020-13424 affects the Joomla! XCloner component, prior to 3.5.4. The vulnerability is an authenticated local file disclosure via a path traversal in the download functionality of the XClonerBackup component (case 'download'), where the parameter file is used to read arbitrary server files (e...
