534 matches found
Fortinet FortiPortal代码问题漏洞
Fortinet FortiPortal is an advanced, feature-rich hosted security analysis and management support tool for Fortinet's FortiGate, FortiWiFi and FortiAP product lines, available as a virtual machine for use by MSPs. The vulnerability stems from an improper restriction of the XML external entity...
CVE-2021-32833 Unauthenticated file read in Emby Server
Emby Server is a personal media server with apps on many devices. In Emby Server on Windows there is a set of arbitrary file read vulnerabilities. This vulnerability is known to exist in version 4.6.4.0 and may not be patched in later versions. Known vulnerable routes are...
Information disclosure
The vRealize Operations Manager API 8.x prior to 8.5 contains an arbitrary file read vulnerability. A malicious actor with administrative access to vRealize Operations Manager API can read any arbitrary file on server leading to information disclosure...
CVE-2021-22022
Summary (CVE-2021-22022) : VMware vRealize Operations Manager API (versions 8.x before 8.5) contains an arbitrary file read vulnerability. An attacker with administrative access to the vROps API can read arbitrary files on the server, causing information disclosure. The issue is tied to the vROps...
CVE-2021-26086
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerability in the /WEB-INF/web.xml endpoint. The affected versions are before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1...
CVE-2021-26085
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3...
CVE-2021-33184
Server-Side request forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote authenticated users to read arbitrary files via unspecified vectors...
Arbitrary File Read Vulnerability in H3C SecPath ACG1000
The H3C SecPath ACG1000 is a next-generation application control gateway. An arbitrary file read vulnerability exists in the H3C SecPath ACG1000. An attacker can exploit the vulnerability to read arbitrary files...
Sifchain: Path Transversal inside saveContracts.js
Reference: https://portswigger.net/web-security/file-path-traversal Directory traversal also known as file path traversal is a web security vulnerability that allows an attacker to read arbitrary files on the server that is running an application. This might include application code and data,...
Arbitrary File Read Vulnerability in BlueLine's New Generation Digital OA (Large and Medium Enterprises) EKP
Shenzhen BlueLine Software Co., Ltd. is a well-known large-platform OA service provider and a leading knowledge management solution provider in China, which is a national high-tech enterprise specializing in knowledge-based consulting, software R&D, implementation and technical services for...
Arbitrary File Read Vulnerability in Dahua In-vehicle Integrated Management Platform of Zhejiang Huaruijie Technology Co.
Ltd. is a subsidiary of Zhejiang Dahua Technology Co., Ltd. and the company's business scope: technical services, technology development, manufacturing of automobile parts and accessories; wholesale of automobiles and spare parts; retail of automobile parts and accessories; manufacturing of...
Arbitrary File Read Vulnerability in Novelty House-plus
Novel boutique-plus novel-plus is a multi-end PC, WAP reading, functional original literature CMS system , built on SpringCloud , using MyBatis as the persistence layer . Novel-plus has an arbitrary file read vulnerability that can be exploited by an attacker to read any file in the system...
Arbitrary File Read Vulnerability in Fusion Router K3
Founded in 2009, Fusion Data Communication Technology Co., Ltd. is a technologically innovative enterprise that provides users with smart products and cloud services in the field of smart home. An arbitrary file read vulnerability exists in Fusion Router K3, which can be exploited by attackers to...
Arbitrary File Read Vulnerability in ZXV10 W815N at ZTE CORPORATION
The ZXV10 W815N is a wireless router from ZTE Corporation. The ZXV10 W815N from ZTE Corporation suffers from an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...
Arbitrary File Read Vulnerability in LightCMS
LightCMS is a lightweight content management system CMS that can also be used as a general-purpose back-office management framework. An arbitrary file read vulnerability exists in LightCMS, which can be exploited by an attacker to read arbitrary files...
SonicWall Email Security post-authentication arbitrary file read vulnerability
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host. CVE: CVE-2021-20023 Last updated: April 20, 2021, 11:12 a.m...
Arbitrary File Read Vulnerability in V8+ Terminal Security System (CNVD-2021-30536)
V8+ Terminal Security System is a new-generation enterprise terminal security software, which can dynamically detect, real-time process, and trace unknown threats in the user's network across the network to meet the increasingly complex needs of domestic enterprise users for security protection o...