CVE-2018-12564: Improper Input Validation

An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for URLs in the submit page, a user can forge an HTTP request that will force lava-server-gunicorn to return any file on the server that is readable by lavaserver and valid yaml...

Security Bulletin: Multiple security vulnerabilities have been addressed in LMS 5.0 on Cloud

Summary Multiple security vulnerabilities have been addressed in LMS 5.0 on Cloud Vulnerability Details CVEID: CVE-2016-6126 DESCRIPTION: IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing...

Security Bulletin: Unauthenticated arbitrary file disclosure in IBM SPSS Collaboration and Deployment Services (CVE-2013-4043)

Summary A remote, unauthenticated attacker can send a HTTP request to retrieve the content of any file on the IBM SPSS Collaboration and Deployment Service server. Vulnerability Details CVEID: CVE-2013-4043 DESCRIPTION: A remote, unauthenticated attacker can send a HTTP request to retrieve the...

Security Bulletin: IBM® DB2® contains a file disclosure vulnerability using a SELECT statement with XML/XSLT function (CVE-2014-8910)

Summary IBM DB2 contains a file disclosure vulnerability. A remote, authenticated DB2 user could exploit this vulnerability by executing a specially-crafted SELECT statement with XML/XSLT function to read arbitrary text files owned by the DB2 instance owner. On Windows, the attacker is able to re...

Security Bulletin: IBM® DB2® contains a file disclosure vulnerability in the database automated maintenance feature (CVE-2015-1883)

Summary IBM DB2 contains a file disclosure vulnerability in the database automated maintenance feature. A remote, authenticated DB2 user with elevated privilege could exploit this vulnerability by manipulating an automated maintenance policy stored procedure to view any files owned by the DB2...

hostr path traversal vulnerability

hostr is a simple web server which is mainly used to test HTML code. A path traversal vulnerability exists in hostr 2.3.5 and earlier versions. An attacker can send a GET request for a URL path with the sequence '. /' sequence in a GET request can be used to read a file outside the current path...

CVE-2018-8819

An XXE issue was discovered in Automated Logic Corporation ALC WebCTRL Versions 6.0, 6.1 and 6.5. An unauthenticated attacker could enter malicious input to WebCTRL and a weakly configured XML parser will allow the application to disclose full file contents from the underlying web server OS via t...

Design/Logic Flaw

An XXE issue was discovered in Automated Logic Corporation ALC WebCTRL Versions 6.0, 6.1 and 6.5. An unauthenticated attacker could enter malicious input to WebCTRL and a weakly configured XML parser will allow the application to disclose full file contents from the underlying web server OS via t...

PT-2018-18641

Name of the Vulnerable Software and Affected Versions Automated Logic Corporation WebCTRL versions 6.0 through 6.5 Description A security issue was found that allows an unauthenticated attacker to disclose full file contents from the underlying web server OS. This is possible due to a weakly...

CVE-2018-8819: Improper Restriction of XML External Entity Reference

An XXE issue was discovered in Automated Logic Corporation ALC WebCTRL Versions 6.0, 6.1 and 6.5. An unauthenticated attacker could enter malicious input to WebCTRL and a weakly configured XML parser will allow the application to disclose full file contents from the underlying web server OS via t...

CVE-2018-5181

If a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a different child process the tab will open a local file corresponding to the dropped URL, contrary to policy. One way to make the target tab open more reliably in a separate process is to open it with...

CVE-2017-5387: Insertion of Sensitive Information into Externally-Accessible File or Directory

The existence of a specifically requested local file can be found due to the double firing of the "onerror" when the "source" attribute on a " " tag refers to a file that does not exist if the source page is loaded locally. This vulnerability affects Firefox 51...

PT-2018-6246

Name of the Vulnerable Software and Affected Versions: dgard8.lab6 affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access to files outside...

PT-2018-6195

Name of the Vulnerable Software and Affected Versions: wffserve affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, enabling the attacker to access...

PT-2018-6214

Name of the Vulnerable Software and Affected Versions: open-device versions affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access to file...

PT-2018-6240

Name of the Vulnerable Software and Affected Versions: ltt versions affected versions not specified Description: The issue concerns a directory traversal problem, allowing an attacker to access the filesystem by manipulating the URL with "../". This vulnerability enables a malicious actor to acce...

PT-2018-6218

Name of the Vulnerable Software and Affected Versions: cypserver affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access to files outside o...

PT-2018-6202

Name of the Vulnerable Software and Affected Versions: ewgaddis.lab6 affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access to files outsi...

PT-2018-6247

Name of the Vulnerable Software and Affected Versions: yttivy versions affected versions not specified Description: The issue concerns a directory traversal problem, allowing an attacker to access the filesystem by manipulating the URL with "../". This vulnerability enables a malicious actor to...

PT-2018-6224

Name of the Vulnerable Software and Affected Versions: qinserve affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access to files outside of...