Node.js 8.5.0 Path Traversal File Disclosure

File disclosure vulnerability in Node.js Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

uWSGI Path Traversal File Disclosure

File disclosure vulnerability in uWSGI Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Microsoft Windows EMET XML External Entity Injection Vulnerability

Microsoft Windows 10 and others are a series of operating systems released by the American company Microsoft Microsoft, Enhanced Mitigation Experience Toolkit is a free security toolkit for Microsoft Windows. An XML external entity injection vulnerability exists in Microsoft Windows EMET, which...

Adminer script versions up to 4.6.2 contains file disclosure vulnerability

More info at https://sansec.io/research/adminer-4.6.2-file-disclosure-vulnerability...

PT-2018-6347

Name of the Vulnerable Software and Affected Versions: Atlassian Fisheye and Crucible versions prior to 4.3.2 Atlassian Fisheye and Crucible versions 4.4.0 through 4.4.2 Atlassian Fisheye and Crucible versions prior to 4.5.0 Description: The issue allows remote attackers to read files contained...

Adminer script versions up to 4.6.2 contains file disclosure vulnerability

More info at https://sansec.io/research/adminer-4.6.2-file-disclosure-vulnerability...

PT-2018-11466 · Webgrind · Webgrind

Name of the Vulnerable Software and Affected Versions: Webgrind version 1.5 Description: The issue allows anyone to view files from the local filesystem that the webserver user has access to. This is achieved by manipulating the file parameter in the /index.php API endpoint, specifically through...

spark: Absolute and relative pathnames allow for unintended static file disclosure

In Spark before 2.7.2, a remote attacker can read unintended static files via various representations of absolute or relative pathnames, as demonstrated by file: URLs and directory traversal sequences. NOTE: this product is unrelated to Ignite Realtime Spark...

CVE-2018-1000548

Umlet version 14.3 contains a XML External Entity XXE vulnerability in File parsing that can result in disclosure of confidential data, denial of service, server side request forgery. This attack appear to be exploitable via Specially crafted UXF file. This vulnerability appears to have been fixe...

CVE-2018-1000535

lms version = LMS011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be exploitable via GET parameter. This vulnerability appears to have been fixed in after commit 254765e...

CVE-2018-1000535

lms version = LMS011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be exploitable via GET parameter. This vulnerability appears to have been fixed in after commit 254765e...

Design/Logic Flaw

lms version = LMS011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be exploitable via GET parameter. This vulnerability appears to have been fixed in after commit 254765e...

CVE-2018-1000535

lms version = LMS011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be exploitable via GET parameter. This vulnerability appears to have been fixed in after commit 254765e...

CVE-2018-1000535

CVE-2018-1000535 concerns LMS, where versions up to and including LMS_011123 expose a Local File Disclosure in the LMS module’s file-reading functionality. The vulnerability can allow reading server files and is reported to be exploitable via a GET parameter. The issue’s impact is described as pa...

CVE-2018-1000535

lms version = LMS011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be exploitable via GET parameter. This vulnerability appears to have been fixed in after commit 254765e...

CVE-2018-1000535: Exposure of Sensitive Information to an Unauthorized Actor

lms version = LMS011123 contains a Local File Disclosure vulnerability in File reading functionality in LMS module that can result in Possible to read files on the server. This attack appear to be exploitable via GET parameter. This vulnerability appears to have been fixed in after commit 254765e...

PT-2018-9431

Name of the Vulnerable Software and Affected Versions LMS versions = LMS 011123 Description The issue is related to a Local File Disclosure vulnerability in the File reading functionality of the LMS module. This can result in the possibility of reading files on the server. The attack appears to b...

GreenCMS Information Disclosure Vulnerability

GreenCMS is a content management system CMS based on ThinkPHP. A security vulnerability exists in GreenCMS version 2.3.0603. A remote attacker can exploit the vulnerability by sending a direct request to the Data/Log/yearmonthday.log file to obtain sensitive information...

DEBIAN-CVE-2018-12564

An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for URLs in the submit page, a user can forge an HTTP request that will force lava-server-gunicorn to return any file on the server that is readable by lavaserver and valid yaml...

CVE-2018-12564

An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for URLs in the submit page, a user can forge an HTTP request that will force lava-server-gunicorn to return any file on the server that is readable by lavaserver and valid yaml...