3388 matches found
Design/Logic Flaw
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A specially crafted import file could read files on the server...
CVE-2021-22203
CVE-2021-22203 affects GitLab CE/EE; a specially crafted Wiki page could read arbitrary files on the server. Affected versions: 13.7.9–13.8.6, 13.9.x before 13.9.5, and 13.10.x before 13.10.1. Remediation: upgrade to patched releases (e.g., 13.8.7, 13.9.5, 13.10.1 or newer). Root cause: Wiki hand...
GitLab 安全漏洞
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to view the contents of a project's files, commit history, bug lists, and more. A security vulnerability exists in GitLab CE/EE...
Nanchang Yunduan Network Technology Co., Ltd. website building system has arbitrary file reading vulnerability
Nanchang Cloud Network Technology Co., Ltd. is a dual-soft enterprise and high-tech enterprise focusing on the field of online education. The Nanchang Yunduan Network Technology Co., Ltd. website building system has an arbitrary file reading vulnerability, which can be exploited by an attacker to...
Ningbo Yinzhou Tianyi Science and Technology Co.
Ningbo Yinzhou Tianyi Technology Co., Ltd. is a high-tech enterprise. Ningbo Yinzhou Tianyi Science and Technology Co., Ltd. station building system there are arbitrary file reading vulnerability, attackers can use the vulnerability to obtain sensitive information...
OurPHP backend has an arbitrary file read vulnerability
OurPHP is an enterprise e-commerce marketing website building system. OurPHP backend has an arbitrary file reading vulnerability, which can be exploited by an attacker to read any system file...
CVE-2021-3310
Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure by reading local files...
Webware Webdesktop Code Issue Vulnerability
Webware Webdesktop is an application software from the company Webware in the Republic of Estonia. A document management software. A code issue vulnerability exists in Webware Webdesktop version 5.1.15. The vulnerability stems from the system allowing an attacker to read all files on the server. ...
Aurora 路径遍历漏洞
Afterlogic Aurora is a set of U.S. Afterlogic Inc. using PHP language written in the enterprise mail server platform. The platform includes features such as e-mail, file storage and address book management. A path traversal vulnerability exists in AfterLogic Aurora through 7.7.9 and WebMail Pro...
Harbin Weicheng Technology Co., Ltd. ourphp exists arbitrary file reading vulnerability
OURPHP is a brand, a PHP + MySQL development based on W3C standard building system. Harbin Weicheng Technology Co. ourphp there are arbitrary file reading vulnerability , attackers can use the vulnerability to obtain sensitive information...
Omni-channel customer service system of Foshan Beame Information Technology Co., Ltd. suffers from arbitrary file reading vulnerability
Foshan Beamy Information Technology Co., Ltd. is an Internet software company. There is an arbitrary file reading vulnerability in the omni-channel customer service system of Foshan Bemis Information Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...
Arbitrary File Read Vulnerability in Video Encoding Equipment Access Network of Hangzhou Hikvision System Technology Co.
Hangzhou Hikvision System Technology Co., Ltd. is a provider of security products and industry solutions. There is an arbitrary file reading vulnerability in the video coding equipment access network of Hangzhou Hikvision System Technology Co., Ltd. that can be exploited by an attacker to read al...
Arbitrary File Read Vulnerability in Ruijie EG Easy Gateway WEB Management System
Ruijie EasyGate is a multi-service integrated gateway product launched by Ruijie Networks to solve the current network egress problems. The WEB management system of Ruijie EG EasyGate has an arbitrary file reading vulnerability, which can be exploited by an attacker to log in a user with low...
RainbowFish PacsOne Server 代码问题漏洞
RainbowFish PacsOne Server is an image archiving and communication system server from RainbowFish, which is used to save incoming images. The system is used to save incoming images, and a file reading vulnerability exists in Rainbowfish PacsOne Server that could be exploited by an attacker to cau...
CVE-2020-15097
loklak is an open-source server application which is able to collect messages from various sources, including twitter. The server contains a search index and a peer-to-peer index sharing interface. All messages are stored in an elasticsearch index. In loklak less than or equal to commit 5f48476, ...
CloudBees Jenkins TOCTOU Competitive Conditions Vulnerability
Jenkins is an open source continuous integration tool written in Java , mainly used for continuous , automated build/test software projects , monitor the operation of external tasks . A TOCTOU competitive condition vulnerability exists in Jenkins 2.275, LTS 2.263.2. An attacker can exploit this...
SIYUCMS backend has arbitrary file reading vulnerability
SIYUCMS is a content management system based on ThinkPHP + AdminLTE. An arbitrary file read vulnerability exists in the backend of SIYUCMS. Attackers can use the vulnerability to obtain sensitive information...
WordPress Simple Board Job plugin path traversal vulnerability
Wordpress Simple Board Job Plugin is a plugin from the WordPress Wordpress Foundation that provides job posting functionality job boards for Wordpress. A security vulnerability exists in WordPress Simple Board Job plugin 2.9.3 and earlier versions, which stems from a path traversal vulnerability ...
