528 matches found
CVE-2021-33184
Server-Side request forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote authenticated users to read arbitrary files via unspecified vectors...
Arbitrary File Read Vulnerability in H3C SecPath ACG1000
The H3C SecPath ACG1000 is a next-generation application control gateway. An arbitrary file read vulnerability exists in the H3C SecPath ACG1000. An attacker can exploit the vulnerability to read arbitrary files...
Sifchain: Path Transversal inside saveContracts.js
Reference: https://portswigger.net/web-security/file-path-traversal Directory traversal also known as file path traversal is a web security vulnerability that allows an attacker to read arbitrary files on the server that is running an application. This might include application code and data,...
Arbitrary File Read Vulnerability in BlueLine's New Generation Digital OA (Large and Medium Enterprises) EKP
Shenzhen BlueLine Software Co., Ltd. is a well-known large-platform OA service provider and a leading knowledge management solution provider in China, which is a national high-tech enterprise specializing in knowledge-based consulting, software R&D, implementation and technical services for...
Arbitrary File Read Vulnerability in Dahua In-vehicle Integrated Management Platform of Zhejiang Huaruijie Technology Co.
Ltd. is a subsidiary of Zhejiang Dahua Technology Co., Ltd. and the company's business scope: technical services, technology development, manufacturing of automobile parts and accessories; wholesale of automobiles and spare parts; retail of automobile parts and accessories; manufacturing of...
Arbitrary File Read Vulnerability in Novelty House-plus
Novel boutique-plus novel-plus is a multi-end PC, WAP reading, functional original literature CMS system , built on SpringCloud , using MyBatis as the persistence layer . Novel-plus has an arbitrary file read vulnerability that can be exploited by an attacker to read any file in the system...
Arbitrary File Read Vulnerability in Fusion Router K3
Founded in 2009, Fusion Data Communication Technology Co., Ltd. is a technologically innovative enterprise that provides users with smart products and cloud services in the field of smart home. An arbitrary file read vulnerability exists in Fusion Router K3, which can be exploited by attackers to...
Arbitrary File Read Vulnerability in ZXV10 W815N at ZTE CORPORATION
The ZXV10 W815N is a wireless router from ZTE Corporation. The ZXV10 W815N from ZTE Corporation suffers from an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...
Arbitrary File Read Vulnerability in LightCMS
LightCMS is a lightweight content management system CMS that can also be used as a general-purpose back-office management framework. An arbitrary file read vulnerability exists in LightCMS, which can be exploited by an attacker to read arbitrary files...
SonicWall Email Security post-authentication arbitrary file read vulnerability
SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host. CVE: CVE-2021-20023 Last updated: April 20, 2021, 11:12 a.m...
Arbitrary File Read Vulnerability in V8+ Terminal Security System (CNVD-2021-30536)
V8+ Terminal Security System is a new-generation enterprise terminal security software, which can dynamically detect, real-time process, and trace unknown threats in the user's network across the network to meet the increasingly complex needs of domestic enterprise users for security protection o...
CodeIgniter has a file read vulnerability
CodeIgniter is a small but powerful PHP framework. CodeIgniter has a file read vulnerability that can be exploited by an attacker to obtain sensitive information...
CVE-2021-22201
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A specially crafted import file could read files on the server...
Arbitrary File Read Vulnerability in O2OA System
O2OA system is a Java open source enterprise information construction platform . O2OA system has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...
Design/Logic Flaw
A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba...
Arbitrary File Read Vulnerability in Doco Document Management System (CNVD-2021-27651)
DuoKe document management system is for the enterprise to provide a safe, easy to use B / S architecture integrated system, through the system to complete the integration of enterprise document storage, sub-group folder display, full-text search of document content, document preview, download and...
CVE-2021-29133
Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...
Arbitrary File Read Vulnerability in SPAdmin
SPAdmin is a backend management system can be quickly developed , integrated with rich third-party APP , the core technology SpringBoot, JPA, Shiro. SPAdmin has an arbitrary file read vulnerability, attackers can use this vulnerability to obtain sensitive information...
EPrints 安全漏洞
EPrints is a free open source software package for building open access repositories compliant with the OAI-PMH protocol. An arbitrary file read vulnerability exists in EPrints 3.4.2. A remote attacker can exploit this vulnerability by entering specially crafted JSON/XML into a cgi/ajax/phrase UR...