7527 matches found
CVE-2020-1938: Undefined Security Weakness
When using the Apache JServ Protocol AJP, care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that...
Wordpress plugin tutor local file leak vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A local file disclosure vulnerability exists in Wordpress plugin tutor. An attacker can exploit the vulnerability to obtain...
Wordpress plugin events-manager local file disclosure vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. events-manager is an events management plugin used in it. A local file disclosure vulnerability exists in the wordpress plugin...
Wordpress plugin wordfence local file leak vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A local file disclosure vulnerability exists in Wordpress plugin wordfence. An attacker can exploit the vulnerability to obta...
WordPress Plugin Wordfence.7.4.5 - Local File Disclosure
Tile: Wordpress Plugin wordfence.7.4.5 - Local File Disclosure Author: mehran feizi Category: webapps Date: 2020-02-12 vendor home page: https://wordpress.org/plugins/wordfence/ ============================================================================== Vulnerable Source: 5662: readfile...
WordPress Wordfence 7.4.5 Local File Disclosure
Tile: Wordpress Plugin wordfence.7.4.5 - Local File Disclosure - Author: mehran feizi - Category: webapps - Date: 2020.02.12 - vendor home page: https://wordpress.org/plugins/wordfence/ ============================================================================== Vulnerable Source: 5662:...
WordPress Wordfence 7.4.5 Local File Disclosure Vulnerability
Exploit for php platform in category web applications - Tile: Wordpress Plugin wordfence.7.4.5 - Local File Disclosure - Author: mehran feizi - Category: webapps - Date: 2020.02.12 - vendor home page: https://wordpress.org/plugins/wordfence/...
Nextcloud server improper authorization vulnerability
Nextcloud is a client-server software suite for creating network hard disks. An improper authorization vulnerability exists in Nextcloud Server 17.0.0. An attacker can exploit the vulnerability to cause preview and file disclosure when opening a file to place a share link via the Gallery...
CVE-2013-0192
File Disclosure in SMF SimpleMachines Forum = 2.0.3: Forum admin can read files such as the database config...
CVE-2013-0192
File Disclosure in SMF SimpleMachines Forum = 2.0.3: Forum admin can read files such as the database config...
Arbitrary file deletion
File Disclosure in SMF SimpleMachines Forum = 2.0.3: Forum admin can read files such as the database config...
CVE-2013-0192
CVE-2013-0192 affects Simple Machines Forum (SMF) up to version 2.0.3. The vulnerability is a file disclosure that enables a forum admin to read sensitive files, such as the database configuration, indicating insufficient access restrictions when handling file operations. The available sources (N...
CVE-2013-0192
File Disclosure in SMF SimpleMachines Forum = 2.0.3: Forum admin can read files such as the database config...
CVE-2013-0192: Exposure of Sensitive Information to an Unauthorized Actor
File Disclosure in SMF SimpleMachines Forum = 2.0.3: Forum admin can read files such as the database config...
CVE-2019-19800
Zoho ManageEngine Applications Manager 14 before 14520 allows a remote unauthenticated attacker to disclose OS file names via FailOverHelperServlet...
CVE-2019-19800
The issue affects Zoho ManageEngine Applications Manager 14 prior to version 14520 . A vulnerability in the FailOverHelperServlet allows a remote unauthenticated attacker to disclose OS file names, constituting an information disclosure vulnerability. The observed impact is limited to exposing fi...
PT-2020-19268
Name of the Vulnerable Software and Affected Versions SOS JobScheduler versions 1.12 through 1.13.2 Description A vulnerability exists in the JOC Cockpit component, allowing attackers to read files from the server via an entity declaration in XML documents used for job and order run-time settings...
CVE-2020-6833
An issue was discovered in GitLab EE 11.3 and later. A GitLab Workhorse bypass could lead to package and file disclosure via request smuggling...