3622 matches found
CVE-2025-9256 Uniong|WebITR - Arbitrary File Reading through Path Traversal
WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...
CVE-2025-9256 Uniong|WebITR - Arbitrary File Reading through Path Traversal
WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...
CVE-2025-50901
JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 2025-05-19 contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading...
PT-2025-34346 · Uniong · Webitr
Name of the Vulnerable Software and Affected Versions: WebITR affected versions not specified Description: WebITR developed by Uniong has an Arbitrary File Reading vulnerability. This allows remote attackers with regular privileges to exploit Absolute Path Traversal and download arbitrary system...
CVE-2025-9257: Absolute Path Traversal
WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...
CVE-2025-9259: Absolute Path Traversal
WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...
CVE-2025-9258: Absolute Path Traversal
WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...
CVE-2025-9256: Absolute Path Traversal
WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...
CVE-2025-50901
JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 2025-05-19 contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading...
CVE-2025-50901
JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 2025-05-19 contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading...
CVE-2025-50901
The JeeWMS warehouse management system (version 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 dated 2025-05-19) is vulnerable to an incorrect authentication bypass . This security flaw allows an attacker to bypass intended authentication mechanisms, potentially leading to arbitrary file reading . Whil...
PT-2025-34121 · Jeewms · Jeewms
Name of the Vulnerable Software and Affected Versions: JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 Description: JeeWMS contains an incorrect authentication bypass vulnerability, which can lead to arbitrary file reading. Recommendations: At the moment, there is no information about a newer...
CVE-2025-50901
JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 2025-05-19 contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading...
JeeWMS 安全漏洞
JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. A security vulnerability exists in JeeWMS, which stems from an authentication bypass that could lead to arbitrary file reading...
CVE-2025-50901: Improper Authentication
JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 2025-05-19 contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading...
CVE-2025-50901
JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 2025-05-19 contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading...
EzGED 安全漏洞
EzGED is an enterprise-level electronic document management system from the French company EzGED. A security vulnerability exists in EzGED version 3.5.0, which stems from insufficient access control and input validation, and could lead to arbitrary file reading...
The vulnerability of the REST Interface component of the Apache Flink streaming and batch data processing platform allows a hacker to read arbitrary files.
The vulnerability of the REST interface component of the Apache Flink streaming and batch data processing platform relates to the use of files and directories accessible to external parties. Exploiting this vulnerability could allow a malicious actor to read arbitrary files remotely...
CVE-2025-8909
Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...
CVE-2025-8912
Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...