The vulnerability in the implementation of diagnostic commands and the import of operating systems for Fireware devices used in network security solutions like WatchGuard Firebox and XTM allows attackers to upload and download arbitrary files.

The vulnerability of the diagnostic commands and the import functions of Fireware operating systems for network security devices like WatchGuard Firebox and XTM lies in the possibility of these commands being exploited. Exploiting this vulnerability allows a malicious actor to upload and download...

CVE-2022-32207: Incorrect Default Permissions

When curl 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally widen the permissions for the target file, leaving the...

U.S. Dept Of Defense: Local file read at https://████/ [HtUS]

Heyy there, I have found local file read vulnerability in your website https://█████/ This the vulnerable endpoint https://██████████/download.php?filePathDownload=dataproducts and the filePathDownload path is vulnerable which allows an attacker to read any local files. There was some sort...

PT-2022-6220 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.0.0 through 9.1.0.19 Dell PowerScale OneFS version 9.2.1.12 Dell PowerScale OneFS version 9.3.0.6 Description: The issue is related to the disclosure of sensitive information through log files in the PowerScal...

The vulnerability of the application deployment automation tool in Kubernetes ArgoCD, related to writing beyond the buffer in memory, allows a malicious actor to write or modify any YAML file.

The vulnerability of the Kubernetes ArgoCD application deployment automation tool relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to write or modify any YAML file...

The vulnerability of the HTTP File Server (+WebDAV) file server for operating systems based on Android allows a hacker to gain access to read, modify, or delete files.

The vulnerability of the HTTP File Server +WebDAV file server for Android operating systems is related to incorrect path name restrictions for restricted access directories. Exploiting this vulnerability can allow an attacker to gain read, modify, or delete file access rights...

CVE-2021-3779

A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorization from the user. This issue was resolved in version 2.10.0 and later...

UBUNTU-CVE-2021-3779

A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorization from the user. This issue was resolved in version 2.10.0 and later...

Advantech iView 路径遍历漏洞

A directory traversal vulnerability exists in versions prior to Advantech iView 5.7.04.6469, which is caused by a network system or product that fails to properly filter resources or file paths. An attacker could use the vulnerability to access unauthorized files and execute arbitrary code...

CVE-2022-2106: Relative Path Traversal

Elcomplus SmartICS v2.3.4.0 does not validate the filenames sufficiently, which enables authenticated administrator-level users to perform path traversal attacks and specify arbitrary files...

CVE-2021-41638

The authentication checks of the MELAG FTP Server in version 2.2.0.4 are incomplete, which allows a remote attacker to access local files only by using a valid username...

CVE-2021-41638

The authentication checks of the MELAG FTP Server in version 2.2.0.4 are incomplete, which allows a remote attacker to access local files only by using a valid username...

MELAG FTP Server 授权问题漏洞

MELAG FTP Server is an FTP server from the German company MELAG. version 2.2.0.4 of MELAG FTP Server is vulnerable to an authentication error, which stems from incomplete authentication checks. A remote attacker could exploit the vulnerability to access local files with a valid username...

CVE-2021-41638: Improper Authentication

The authentication checks of the MELAG FTP Server in version 2.2.0.4 are incomplete, which allows a remote attacker to access local files only by using a valid username...

CVE-2022-1596 ABB Relion REX640 Insufficient file access control

Incorrect Permission Assignment for Critical Resource vulnerability in ABB REX640 PCL1, REX640 PCL2, REX640 PCL3 allows an authenticated attacker to launch an attack against the user database file and try to take control of an affected system node...

PT-2022-21617 · Scanner +1 · Scanner +1

Name of the Vulnerable Software and Affected Versions: Scanner affected versions not specified Description: An authenticated attacker could read arbitrary files from the underlying operating system of the scanner using a custom crafted compliance audit file without providing any valid SSH...

Autodesk Fusion360 代码问题漏洞

Autodesk Fusion360 is a 3D CAD drawing tool from Autodesk, Inc. A code issue vulnerability exists in Autodesk Fusion360 version 2.0.12887, which arises from an application that does not adequately validate user-supplied XML input during insertion of an SVG when parsing a specially crafted SVG fil...

CVE-2022-31062 Unauthenticated Local File Inclusion

Impact A plugin public script can be used to read content of system files. Patches Upgrade to version 1.0.2. Workarounds b/deploy/index.php file can be deleted if deploy feature is not used...

SoftGuard Tech SoftGuard Web 路径遍历漏洞

SoftGuard Tech SoftGuard Web SGW is a security monitoring website from SoftGuard Tech, Inc. A security vulnerability exists in SoftGuard Tech SoftGuard Web versions prior to 5.1.5 that stems from an html injection issue in SGW. An attacker could exploit the vulnerability to access arbitrary files...

SoftGuard Tech SoftGuard Web 跨站脚本漏洞

SoftGuard Tech SoftGuard Web SGW is a security monitoring website from SoftGuard Tech, Inc. A security vulnerability exists in SoftGuard Web SGW versions prior to 5.1.5 that stems from an html injection issue in SGW. An attacker could exploit the vulnerability to access arbitrary files and downlo...