PT-2019-7072

Name of the Vulnerable Software and Affected Versions Epic theme for WordPress versions through 2014-09-07 Description The issue allows arbitrary file downloads via the file parameter to the "includes/download.php" endpoint. This could potentially lead to unauthorized access to sensitive files...

CVE-2014-10396: Improper Limitation of a Pathname to a Restricted Directory

The epic theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to includes/download.php...

CVE-2014-10397: Improper Limitation of a Pathname to a Restricted Directory

The Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to lib/scripts/download.php...

PT-2019-7073

Name of the Vulnerable Software and Affected Versions Antioch theme for WordPress versions through 2014-09-07 Description The issue allows arbitrary file downloads via the file parameter to "lib/scripts/download.php". This enables unauthorized access to files on the system. Recommendations For...

OpenEMR Path Traversal Vulnerability

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. A path traversal vulnerability exists in the 'fileName' parameter of the...

Google Chrome has multiple file download vulnerabilities

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 77.0.3865.75. A remote attacker can exploit the vulnerability to bypass file download protection with the help of a specially crafted website...

Multiple Vulnerabilities in Youmu's Learning Platform

Ltd. is a company that builds institutions' informatized teaching and management support system based on the comprehensive platform of Youmu class online education. There are multiple vulnerabilities in the UMOCL learning platform, which can be exploited by attackers to arbitrarily upload, downlo...

PT-2019-5002

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 77.0.3865.75 Description The issue is related to insufficient filtering in Blink, allowing a remote attacker to bypass multiple file download protection via a crafted HTML page. This can potentially lead to data...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 77 to the Stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 77.0.3865.75 contains a number of fixes and improvements -- a full list of changes in this build is available in the log. Wat...

Arbitrary File Download Vulnerability in Mobile Office Portal KK System

BlueLine is a large-platform OA service provider and knowledge management solution provider, a national high-tech enterprise engaged in knowledge-based consulting, software development, implementation and technical services for organizations. An arbitrary file download vulnerability exists in the...

CVE-2019-13408

A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230. It allows attackers to download arbitrary files via url cgibin/ExportSettings.cgi?Download=filepath, without any authentication...

CVE-2019-13408

A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230. It allows attackers to download arbitrary files via url cgibin/ExportSettings.cgi?Download=filepath, without any authentication...

CVE-2019-13408 Advan VD-1 allows users to download arbitrary files

A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230. It allows attackers to download arbitrary files via url cgibin/ExportSettings.cgi?Download=filepath, without any authentication...

CVE-2019-13408

CVE-2019-13408 describes a relative path traversal vulnerability in Advan VD-1 firmware up to version 230, allowing unauthenticated download of arbitrary files via cgibin/ExportSettings.cgi?Download=filepath. Exploitation details and affected products in connected sources include GeoVision/OT plu...

CVE-2019-13408: Relative Path Traversal

A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230. It allows attackers to download arbitrary files via url cgibin/ExportSettings.cgi?Download=filepath, without any authentication...

PT-2019-13320

Name of the Vulnerable Software and Affected Versions Advan VD-1 firmware versions up to 230 Description A relative path traversal issue allows attackers to download arbitrary files without authentication via the API endpoint "/cgi-bin/ExportSettings.cgi" with the Download parameter set to...

OpenEMR Directory Traversal Vulnerability (CNVD-2019-28405)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A directory traversal vulnerability in the patient file download interface in OpenEMR 5.0.1 and earlier versions can be exploited by an authenticated attacker to download arbitrary files from the...

CVE-2019-3967

CVE-2019-3967 affects OpenEMR 5.0.1 and earlier, where the patient file download interface contains a directory traversal flaw allowing authenticated attackers to download arbitrary files from the host system. The connected Red Hat and CNVD entries corroborate the affected product/version and the...

CVE-2019-3967

In OpenEMR 5.0.1 and earlier, the patient file download interface contains a directory traversal flaw that allows authenticated attackers to download arbitrary files from the host system...

PT-2019-16816

Name of the Vulnerable Software and Affected Versions OpenEMR versions 5.0.1 and earlier Description The patient file download interface in OpenEMR contains a directory traversal flaw. This flaw allows authenticated attackers to download arbitrary files from the host system. Recommendations For...