CVE-2020-7830

CVE-2020-7830 affects RAONWIZ RAON KUpload 2018.0.2.50 and earlier. The vulnerability arises from insufficient validation during download, enabling files to be downloaded to arbitrary paths due to unchecked extensions and download paths. Impact is partial confidentiality, integrity, and availabil...

CVE-2020-7830

RAONWIZ v2018.0.2.50 and earlier versions contains a vulnerability that could allow remote files to be downloaded by lack of validation. Vulnerabilities in downloading with Kupload agent allow files to be downloaded to arbitrary paths due to insufficient verification of extensions and download...

PT-2020-19826

Name of the Vulnerable Software and Affected Versions RAONWIZ versions 2018.0.2.50 and earlier Description The issue is related to a lack of validation that could allow remote files to be downloaded. Specifically, vulnerabilities in the Kupload agent enable files to be downloaded to arbitrary pat...

CVE-2020-7830: Improper Input Validation

RAONWIZ v2018.0.2.50 and earlier versions contains a vulnerability that could allow remote files to be downloaded by lack of validation. Vulnerabilities in downloading with Kupload agent allow files to be downloaded to arbitrary paths due to insufficient verification of extensions and download...

CVE-2012-3337: Improper Limitation of a Pathname to a Restricted Directory

IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to download arbitrary files on the system. IBM X-Force ID: 78284...

Arbitrary File Download Vulnerability in shopxo

ShopXO is an open source enterprise-level open source e-commerce system. shopxo has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2020-7831

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however...

CVE-2020-7831

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however...

CVE-2020-7831

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however...

CVE-2020-7831

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however...

CVE-2020-7831: Download of Code Without Integrity Check

A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. The victim user need to reboot, however...

TIBCO Software Data Virtualization Arbitrary File Download Vulnerability

TIBCO Software Data Virtualization is an enterprise data virtualization solution. An arbitrary file download vulnerability exists in the TIBCO Data Virtualization Server component of TIBCO Software Data Virtualization, which can be exploited by a remote attacker to submit a special request to...

Brave Software: Arbitrary file download via "Save .torrent file" option can lead to Client RCE and XSS

Summary: An attacker can use the "Save .torrent file" option in WebTorrent to smuggle malicious files onto the client's machine. Description Brave allows users to download the ".torrent" via WebTorrent. WebTorrent decides whether a file is torrent or not based on the following headers...

CVE-2020-9415

The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a vulnerability that theoretically allows a malicious authenticated user to download any arbitrary file from the affected system. The user...

CVE-2020-9415

CVE-2020-9415 affects the TIBCO Data Virtualization Server component. A malicious authenticated user could download arbitrary files from the system. Affected: Data Virtualization 7.0.8 and below; 8.0.0, 8.1.0, 8.1.1, 8.2.0; Data Virtualization for AWS Marketplace 8.2.0 and below. Root cause: unau...

CVE-2020-9415 TIBCO Data Virtualization

The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a vulnerability that theoretically allows a malicious authenticated user to download any arbitrary file from the affected system. The user...

CVE-2020-9415: Undefined Security Weakness

The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a vulnerability that theoretically allows a malicious authenticated user to download any arbitrary file from the affected system. The user...

PT-2020-20644

Name of the Vulnerable Software and Affected Versions TIBCO Data Virtualization versions 7.0.8 and below TIBCO Data Virtualization versions 8.0.0, 8.1.0, 8.1.1, and 8.2.0 TIBCO Data Virtualization for AWS Marketplace versions 8.2.0 and below Description The issue allows a malicious authenticated...

Arbitrary File Download Vulnerability in Heartland OA

Heartland OA is a multi-functional and intelligent office application. An arbitrary file download vulnerability exists in Heartland OA. An attacker can exploit the vulnerability to download arbitrary files...

CVE-2020-15658

The code for downloading files did not properly take care of special characters, which led to an attacker being able to cut off the file ending at an earlier position, leading to a different file type being downloaded than shown in the dialog. This vulnerability affects Firefox ESR 78.1, Firefox...