Debian: Security Advisory (DLA-214-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XWiki Platform 代码问题漏洞

XWiki Platform is a suite of Wiki platforms for creating Web collaboration applications from the French company XWiki. XWiki Platform suffers from a code issue vulnerability that stems from the fact that any user with document editing privileges can trigger an XAR import on a spoofed XAR file to ...

CVE-2023-27480: Improper Restriction of XML External Entity Reference

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with edit rights on a document can trigger an XAR import on a forged XAR file, leading to the ability to display the content of any file on the XWiki server host...

CVE-2023-25265

Docmosis Tornado = 2.9.4 is vulnerable to Directory Traversal leading to the disclosure of arbitrary content on the file system...

Osprey Pump Controller 1.0.1 Unauthenticated File Disclosure Vulnerability

Osprey Pump Controller version 1.0.1 suffers from an unauthenticated file disclosure vulnerability. Osprey Pump Controller 1.0.1 Unauthenticated File Disclosure Vendor: ProPump and Controls, Inc. Product web page: https://www.propumpservice.com | https://www.pumpstationparts.com Affected version:...

Osprey Pump Controller 1.0.1 Unauthenticated File Disclosure

Osprey Pump Controller 1.0.1 Unauthenticated File Disclosure Vendor: ProPump and Controls, Inc. Product web page: https://www.propumpservice.com | https://www.pumpstationparts.com Affected version: Software Build ID 20211018, Production 10/18/2021 Mirage App: MirageAppManager, Release 1.0.1 Mirag...

CVE-2023-1034

Path Traversal: '..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9...

CVE-2023-23063

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi...

CVE-2023-23063

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi...

Arbitrary file deletion

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi...

CVE-2023-23063

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi...

CVE-2023-23063

The Cellinx NVT camera appliance (version v1.0.6.002b ) is susceptible to a local file disclosure vulnerability within the /cgi-bin/GetFileContent.cgi component. The root cause is a path traversal issue where unauthenticated attackers can read arbitrary files via the PATH parameter. This could le...

Cellinx NVT 路径遍历漏洞

Cellinx NVT IP PTZ is a camera appliance from Cellinx Korea. A path traversal vulnerability exists in Cellinx NVT version v1.0.6.002b, which stems from the presence of a local file disclosure vulnerability...

CVE-2023-23063: Improper Limitation of a Pathname to a Restricted Directory

Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi...

PT-2023-18829

Name of the Vulnerable Software and Affected Versions Cellinx NVT version 1.0.6.002b Description The issue is related to a local file disclosure vulnerability. It can be exploited via the /cgi-bin/GetFileContent.cgi component. Recommendations For Cellinx NVT version 1.0.6.002b, consider restricti...

Cisco IOS ROM Monitor File Disclosure

The vulnerability of the Cisco IOS ROM Monitor is related to the leakage of information about files and directories. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Exploit for Path Traversal in Aver Ptzapp_2

CVE-2023-27055 Aver Information Inc. PTZApp2 Directory Tra...

SUSE: Security Advisory (SUSE-SU-2023:0421-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0424-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:0428-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...