6603 matches found
CVE-2020-13924
In Apache Ambari versions 2.6.2.2 and earlier, malicious users can construct file names for directory traversal and traverse to other directories to download files...
Directory traversal
In Apache Ambari versions 2.6.2.2 and earlier, malicious users can construct file names for directory traversal and traverse to other directories to download files...
CVE-2020-13924
CVE-2020-13924 affects Apache Ambari 2.6.2.2 and earlier. Malicious users can construct file names to perform directory traversal and traverse to other directories to download files, enabling a remote, unauthenticated file download vulnerability. The vulnerability is documented across multiple so...
Apache Ambari 路径遍历漏洞
Apache Ambari is a web-based tool that supports provisioning, management and monitoring of Apache Hadoop clusters. An arbitrary file download vulnerability exists in Apache Ambari 2.6.2.2 and earlier versions. An attacker can exploit this vulnerability by constructing filenames to traverse other...
Design/Logic Flaw
It has been discovered in redhat-certification that any unauthorized user may download any file under /var/www/rhcert, provided they know its name. Red Hat Certification 6 and 7 is vulnerable to this issue...
CVE-2019-3897
CVE-2019-3897 affects Red Hat Certification 6 and 7. Affected component: /var/www/rhcert exposure allowing an unauthorized user to download any file by knowing its name. Root cause details are not provided in the available documents, but CVSS metrics indicate remote access with no authentication ...
红帽 Red Hat 安全漏洞
Red Hat is an operating system from the American company Red Hat, Inc. It provides an open source operating system. A security vulnerability exists in Red Hat 6 and 7 that allows any unauthorized user to download any file under /var/www/rhcert...
Arbitrary File Download Vulnerability in WiseStar Universal Collection Management System
Huixing Software Technology Co., Ltd. specializes in the development of software for the water industry. It has developed a series of management software for the water industry: Huixing Water Charge Management System, Huixing Water Business Management Information System, Huixing Water Expansion a...
Hikvision Integrated Video and Environmental Monitoring Management System Exploits Arbitrary File Download Vulnerability
Hikvision is a video-centric IoT solution provider, offering integrated security, smart business and big data services. An arbitrary file download vulnerability exists in Hikvision's integrated video and environmental surveillance management system, which can be exploited by attackers to obtain...
Arbitrary File Download Vulnerability in the FireFleece Endpoint Security Management System of Beijing FireFleece Network Technology Co.
FireFleece Endpoint Security Management System is an enterprise version of computer security protection software. Beijing FireWall Network Technology Co., Ltd FireWall Endpoint Security Management System has an arbitrary file download vulnerability that can be exploited by attackers to download...
Arbitrary File Download Vulnerability in Northeast Normal University Ideal Software Corporation's Smart Education Cloud Platform
Founded in 2001, Northeast Normal University Ideal Software Co., Ltd. is mainly engaged in the theoretical research of basic education informatization, the research, development, promotion and application of basic education resources and software, the training of teachers' education informatizati...
NewStart CGSL MAIN 6.02 : firefox Multiple Vulnerabilities (NS-SA-2021-0052)
The remote NewStart CGSL host, running version MAIN 6.02, has firefox packages installed that are affected by multiple vulnerabilities: - Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Arbitrary File Download Vulnerability in Blue Ocean Premier Billing Management System
Chengdu Starry Blue Ocean Network Technology Co., Ltd. was registered on August 20, 2004 in Wuhou District Market and Quality Supervision Administration. Legal representative Zhang Yuliang, the company's scope of business includes sales: computers and accessories, electronic products, communicati...
SharpSphere - .NET Project For Attacking vCenter
SharpSphere gives red teamers the ability to easily interact with the guest operating systems of virtual machines managed by vCenter. It uses the vSphere Web Services API and exposes the following functions: Command & Control - In combination with F-Secure's C3, SharpSphere provides C&C into VMs...
Design/Logic Flaw
The Java client for the Datadog API before version 1.0.0-beta.9 has a local information disclosure of sensitive information downloaded via the API using the API Client. The Datadog API is executed on a unix-like system with multiple users. The API is used to download a file containing sensitive...
Arbitrary file download vulnerability in ZengCMS 1.0.0 backend
ZengCMS is a backend management system based on the latest TP6.0.x framework and Layui 2.5.x. ZengCMS1.0.0 backend has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information...
Directory Traversal Vulnerability in Easy Control World
Easy Control World is an automation monitoring and information system platform created by Beijing Jiushi Yi Automation Software Co. A directory traversal vulnerability exists in Easy Control World. An attacker can exploit the vulnerability to download arbitrary files from the program installation...
SIYUCMS suffers from an arbitrary file download vulnerability
SIYUCMS is a content management system based on ThinkPHP + AdminLTE. SIYUCMS suffers from an arbitrary file download vulnerability. An attacker can exploit this vulnerability to download arbitrary files on the server...
Arbitrary File Download Vulnerability in Renzi Network Security Management System
hereinafter referred to as Renzihang was founded in May 2000, and is committed to escorting the network information security of state management organizations, operators, enterprises and institutions, and individuals. An arbitrary file download vulnerability exists in Renzihang's network security...
