ZTE ZXR10 1800-2S suffers from a file read vulnerability (CNVD-2019-46614)

The ZXR10 1800-2S is a router product from China's ZTE Corporation ZTE. A file read vulnerability exists in the ZTE ZXR10 1800-2S. An attacker can exploit this vulnerability to read arbitrary files...

ZTE ZXR10 1800-2S suffers from a file read vulnerability (CNVD-2019-46615)

The ZXR10 1800-2S is a router product from China's ZTE Corporation ZTE. A file read vulnerability exists in the ZTE ZXR10 1800-2S. An attacker can exploit this vulnerability to read arbitrary files...

ZTE ZXR10 1800-2S suffers from a file read vulnerability (CNVD-2019-46612)

The ZXR10 1800-2S is a router product from China's ZTE Corporation ZTE. A file read vulnerability exists in the ZTE ZXR10 1800-2S. An attacker can exploit this vulnerability to read arbitrary files...

CVE-2012-5535

CVE-2012-5535 concerns gnome-system-log polkit policy that allows reading arbitrary files on the system. The root cause is a polkit policy mistake that grants read access beyond intended scope. Impact: confidentiality is potentially HIGH (per CVSS-3.1), with non-trivial access possible without us...

ZTE ZXR10 1800-2S suffers from a file read vulnerability (CNVD-2019-46633)

The ZXR10 1800-2S is a router product from China's ZTE Corporation ZTE. A file read vulnerability exists in the ZTE ZXR10 1800-2S. An attacker can exploit this vulnerability to read arbitrary files...

File Read Vulnerability in ZTE ZXR10 1800-2S

The ZXR10 1800-2S is a router product from China's ZTE Corporation ZTE. A file read vulnerability exists in the ZTE ZXR10 1800-2S. An attacker can exploit this vulnerability to read arbitrary files...

ZTE ZXR10 1800-2S suffers from a file read vulnerability (CNVD-2019-46634)

The ZXR10 1800-2S is a router product from China's ZTE Corporation ZTE. A file read vulnerability exists in the ZTE ZXR10 1800-2S. An attacker can exploit this vulnerability to read arbitrary files...

DEBIAN-CVE-2009-3614

liboping 1.3.2 allows users reading arbitrary files upon the local system...

CVE-2009-3614

Liboping 1.3.2 is affected by CVE-2009-3614 due to an input validation error that allows reading arbitrary files on the local system. The connected documents reiterate this description but do not provide further technical details (such as affected functions, vectors, or patch versions). No exploi...

File Read Vulnerability in HadSky Light Forums

adSky Light Forum is a newborn original PHP MySQL open source system , the main goal is to achieve light , fast , simple , full , 100% original open source system , which now covers PC, mobile, IOS and Android APP and WeChat applet . HadSky Light Forum file reading vulnerability , attackers can u...

File Read Vulnerability in Huatian Power OA System

Huatian Power OA system is a collaborative office software developed by Dalian Huatian Software Co. A file read vulnerability exists in the Huatian Power OA system, which can be exploited by attackers to obtain sensitive information...

CVE-2019-15065

A service which is hosted on port 6998 in HiNet GPON firmware I040GWR190731 allows an attacker to execute a specific command to read arbitrary files. CVSS 3.0 Base score 9.3. CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L...

cPanel Input Validation Error Vulnerability (CNVD-2019-36145)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An Access Control Error vulnerability exists in versions of cPanel prior to 11.54.0.4. An attacker can exploit the vulnerability ...

Arbitrary File Read

github.com/opencontainers/runc is vulnerable to arbitrary file read. The vulnerability exists as the AppAmor restrictions can be bypassed due to incorrect mount targets check, allowing a malicious Docker image to be mounted over a /proc directory...

CVE-2019-15138

The html-pdf package 2.2.0 for Node.js has an arbitrary file read vulnerability via an HTML file that uses XMLHttpRequest to access a file:/// URL...

Exploit for Path Traversal in Ivanti Connect_Secure

pwn-pulse.sh Exploit for Pulse Connect Secure SSL VPN arbitr...

PT-2019-9040 · Clickhouse · Clickhouse Mysql Client

Name of the Vulnerable Software and Affected Versions: ClickHouse MySQL client versions prior to 1.1.54390 Description: The issue concerns the "LOAD DATA LOCAL INFILE" functionality in the ClickHouse MySQL client, which was enabled and allowed a malicious MySQL database to read arbitrary files fr...

CVE-2017-18448

cPanel before 64.0.21 allows certain file-read operations via a Serverinfomanpage API call SEC-252...

CVE-2016-10829

cPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form processing error SEC-99...

JetBrains TeamCity File Read Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A file read vulnerability exists in JetBrains...