Design/Logic Flaw

An arbitrary file download and execution vulnerability was found in the VideoOffice X2.9 and earlier versions CVE-2020-7878. This issue is due to missing support for integrity check...

Code injection

Printchaser v2.2021.804.1 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution...

CVE-2020-7878

An arbitrary file download and execution vulnerability was found in the VideoOffice X2.9 and earlier versions CVE-2020-7878. This issue is due to missing support for integrity check...

CVE-2020-7878

VideoOffice is affected by CVE-2020-7878: an arbitrary file download and execution vulnerability in X2.9 and earlier due to missing integrity checks. Root cause: lack of integrity verification enables untrusted content to be processed, leading to potential code execution. Affected product: VideoO...

Printchaser security vulnerabilities

Printchaser is a solution from Informer Technologies that enables companies to sense and track the dangers of unauthorized information outflow by applying print log management and monitoring as well as inserting watermarks into printouts from office PCs. Printchaser has a security vulnerability...

CVE-2020-7878: Missing Support for Integrity Check

An arbitrary file download and execution vulnerability was found in the VideoOffice X2.9 and earlier versions CVE-2020-7878. This issue is due to missing support for integrity check...

PT-2021-12698

Name of the Vulnerable Software and Affected Versions: VideoOffice versions X2.9 and earlier Description: An arbitrary file download and execution issue was found due to missing support for integrity check. Recommendations: For VideoOffice versions X2.9 and earlier, update to a version that...

CVE-2020-20948

An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable...

CVE-2020-20948

An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable...

Arbitrary file deletion

An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable...

CVE-2020-20948

An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable...

CVE-2020-20948

CVE-2020-20948 affects jeecg v3.8, enabling arbitrary file download by modifying the localPath variable. The vulnerability stems from insufficient input validation/Access Control, allowing an attacker to access sensitive files. Exploitation status is not documented in the provided sources; no pat...

CVE-2021-45789

An arbitrary file read vulnerability was found in Metersphere v1.15.4, where authenticated users can read any file on the server via the file download function...

CVE-2021-45789

An arbitrary file read vulnerability was found in Metersphere v1.15.4, where authenticated users can read any file on the server via the file download function...

CVE-2021-45789

CVE-2021-45789 affects Metersphere v1.15.4, where authenticated users can read arbitrary files on the server via the file download function. The vulnerability details indicate impact to confidentiality (high) with no stated impact on integrity or availability. The available connected sources desc...

PT-2021-24297 · Unknown · Metersphere

Name of the Vulnerable Software and Affected Versions: Metersphere version 1.15.4 Description: An arbitrary file read issue was found, allowing authenticated users to read any file on the server via the file download function. Recommendations: For Metersphere version 1.15.4, consider restricting...

CVE-2021-45789: Undefined Security Weakness

An arbitrary file read vulnerability was found in Metersphere v1.15.4, where authenticated users can read any file on the server via the file download function...

CVE-2020-20948: Exposure of Resource to Wrong Sphere

An arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files via modification of the "localPath" variable...

CVE-2021-44162

CVE-2021-44162 affects Chain Sea AI chatbot system. The root cause is a path traversal vulnerability in the file download function caused by improper filtering of special URL parameters, allowing an unauthenticated remote attacker to download arbitrary system files. Per the sources, this is a net...

CVE-2021-44162: Improper Limitation of a Pathname to a Restricted Directory

Chain Sea ai chatbot system’s specific file download function has path traversal vulnerability. The function has improper filtering of special characters in URL parameters, which allows a remote attacker to download arbitrary system files without authentication...