Arbitrary File Read

paddlepaddle is vulnerable to External Control of File Name or Path. The vulnerability is caused due to improper input validation within paddle.vision.ops.readfile, which allows an attacker to read arbitrary files on the system...

Ajax Load More < 7.1.0 - Authenticated (Admin+) Directory Traversal to Arbitrary File Read

Description The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 7.0.1 via the 'type' parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents...

Adobe ColdFusion Arbitrary File Read Vulnerability at Audobee Software (Shanghai) Co.

Adobe ColdFusion is a dynamic web server. Adobe ColdFusion by Audobee Software Shanghai Co., Ltd. has an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...

PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_file

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...

GHSA-JWRC-3V3F-5CQ5 PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_file

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...

CVE-2024-1603

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...

CVE-2024-1603 confirmed

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...

CVE-2024-1603 confirmed

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...

CVE-2024-1603 confirmed

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...

Exploit for Path Traversal in Ghost

CVE-2023-40028 Proof of Concept This repository contains a pr...

PaddlePaddle 安全漏洞

PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. A security vulnerability exists in PaddlePaddle version 2.6.0, which stems from allowing arbitrary files to be read via paddle.vision.ops.readfile...

PT-2024-18164

Name of the Vulnerable Software and Affected Versions paddlepaddle/paddle version 2.6.0 Description The issue allows for arbitrary file read via the paddle.vision.ops.read file function. Recommendations For paddlepaddle/paddle version 2.6.0, consider restricting access to the read file function...

PT-2024-13006 · Geoserver · Geoserver

Name of the Vulnerable Software and Affected Versions: GeoServer versions 2.23.4 and prior Description: A path traversal vulnerability requires GeoServer Administrator with access to the admin console to misconfigure the Global Settings for log file location to an arbitrary location. The admin...

CVE-2024-20767

ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify restricted files. Exploitation of this issue does not require user interactio...

CVE-2024-20767 ColdFusion | Improper Access Control (CWE-284)

ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify restricted files. Exploitation of this issue does not require user interactio...

CVE-2024-20767

ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify restricted files. Exploitation of this issue does not require user interactio...

CVE-2023-46181

IBM Sterling Secure Proxy 6.0.3 and 6.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 269686...

CVE-2023-46181

CVE-2023-46181 affects IBM Sterling Secure Proxy versions 6.0.3 and 6.1.0. The issue allows web pages to be stored locally and read by another user on the same system (information disclosure). Remediation: upgrade to IBM Sterling Secure Proxy iFix 11 (for 6.0.3) or iFix 03 (for 6.1.0) per IBM. Ot...

CVE-2023-6825

The File Manager and File Manager Pro plugins for WordPress are vulnerable to Directory Traversal in versions up to, and including version 7.2.1 free version and 8.3.4 Pro version via the target parameter in the mkfilefoldermanageractioncallbackshortcode function. This makes it possible for...

PT-2024-2206

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2023.6 and 2021.12 and earlier Description Adobe ColdFusion is affected by an Improper Access Control issue. This flaw allows an unauthenticated attacker to gain access to sensitive files and perform arbitrary file...