7896 matches found
PT-2022-26818 · Arobas Music · Arobas Music Guitar Pro
Name of the Vulnerable Software and Affected Versions: Arobas Music Guitar Pro for iPad and iPhone versions prior to 1.10.2 Description: The issue allows attackers to perform directory traversal and download arbitrary files via a crafted web request. Recommendations: For versions prior to 1.10.2,...
CVE-2022-43264: Improper Limitation of a Pathname to a Restricted Directory
Arobas Music Guitar Pro for iPad and iPhone before v1.10.2 allows attackers to perform directory traversal and download arbitrary files via a crafted web request...
Arobas Music Guitar Pro path traversal vulnerability
Arobas Music Guitar Pro is a multi-track guitar, bass and sheet music editor from the French company Arobas Music. A security vulnerability exists in Arobas Music Guitar Pro v1.10.2 and earlier, which stems from a vulnerability that allows an attacker to implement directory traversal and download...
CVE-2022-42977
The Netic User Export add-on before 1.3.5 for Atlassian Confluence has the functionality to generate a list of users in the application, and export it. During export, the HTTP request has a fileName parameter that accepts any file on the system e.g., an SSH private key to be downloaded...
CVE-2022-42977
The Netic User Export add-on before 1.3.5 for Atlassian Confluence has the functionality to generate a list of users in the application, and export it. During export, the HTTP request has a fileName parameter that accepts any file on the system e.g., an SSH private key to be downloaded...
Server side request forgery (ssrf)
The Netic User Export add-on before 1.3.5 for Atlassian Confluence has the functionality to generate a list of users in the application, and export it. During export, the HTTP request has a fileName parameter that accepts any file on the system e.g., an SSH private key to be downloaded...
Simmeth System Supplier Manager: Path traversal vulnerability
Simmeth System Supplier Manager is a supply chain software from Simmeth System, a German company, and an arbitrary file download vulnerability exists in versions prior to Simmeth System Supplier Manager 5.6, which can be exploited by attackers to download arbitrary files from a web server by...
CVE-2022-42977
The CVE-2022-42977 relates to the Netic User Export add-on for Atlassian Confluence (before version 1.3.5). The vulnerability arises from the export functionality, where the HTTP request’s fileName parameter can specify any file on the system, enabling retrieval of arbitrary files (e.g., SSH priv...
CVE-2022-42977
The Netic User Export add-on before 1.3.5 for Atlassian Confluence has the functionality to generate a list of users in the application, and export it. During export, the HTTP request has a fileName parameter that accepts any file on the system e.g., an SSH private key to be downloaded...
PT-2022-26689 · Atlassian · Netic User Export +1
Name of the Vulnerable Software and Affected Versions: Netic User Export add-on for Atlassian Confluence versions prior to 1.3.5 Description: The issue allows an HTTP request to download any file on the system, including sensitive files like SSH private keys, due to the fileName parameter accepti...
CVE-2022-42977: Improper Limitation of a Pathname to a Restricted Directory
The Netic User Export add-on before 1.3.5 for Atlassian Confluence has the functionality to generate a list of users in the application, and export it. During export, the HTTP request has a fileName parameter that accepts any file on the system e.g., an SSH private key to be downloaded...
Atlassian Confluence path traversal vulnerability
Atlassian Confluence is a suite of specialized enterprise knowledge management and collaboration software from Atlassian Australia that can also be used to build an enterprise WiKi. A path traversal vulnerability exists in Atlassian Confluence versions prior to 1.3.5. An attacker can exploit this...
CVE-2022-39037
Agentflow BPM file download function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...
CVE-2022-39037 FLOWRING Agentflow BPM - Path Traversal
Agentflow BPM file download function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...
CVE-2022-39037: Improper Limitation of a Pathname to a Restricted Directory
Agentflow BPM file download function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...
PT-2022-24691 · Unknown · Agentflow Bpm
Name of the Vulnerable Software and Affected Versions: Agentflow BPM affected versions not specified Description: The Agentflow BPM file download function has a path traversal issue. This allows an unauthenticated remote attacker to bypass authentication and download arbitrary system files...
Flowring Technology Agentflow BPM Path Traversal Vulnerability
Flowring Technology Agentflow BPM is an enterprise process management system from Flowring Technology, a Chinese company. A path traversal vulnerability exists in Flowring Technology Agentflow BPM, which arises from a file download feature that allows an unauthenticated, remote attacker to bypass...
WordPress Advanced Order Export For WooCommerce Plugin < 3.3.3 CSRF Vulnerability
The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...