CVE-2021-32018

CVE-2021-32018 affects Jump AMS 3.6.0.04.009-2487 and is due to an improper limitation of file loading on the server filesystem in the JUMP SOAP API, enabling arbitrary file reads (directory traversal). Public records list CVSS metrics: CVSSv3.1 base 6.5 (Network, Low complexity, Privileges Low, ...

CVE-2021-32018: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in JUMP AMS 3.6.0.04.009-2487. The JUMP SOAP API was vulnerable to arbitrary file reading due to an improper limitation of file loading on the server filesystem, aka directory traversal...

Fortinet FortiPortal 路径遍历漏洞

Fortinet FortiPortal is an advanced, feature-rich managed security analysis and management support tool for Fortinet's FortiGate, FortiWiFi, and FortiAP product lines, available as a virtual machine for MSPs. A path traversal vulnerability exists in Fortinet FortiPortal, which is caused by an inp...

PT-2021-19630

Name of the Vulnerable Software and Affected Versions: JUMP AMS version 3.6.0.04.009-2487 Description: An issue was discovered in the JUMP SOAP API, which is vulnerable to arbitrary file reading due to an improper limitation of file loading on the server filesystem, also known as directory...

CVE-2021-37445

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading...

CVE-2021-37446

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading...

Directory traversal

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading...

CVE-2021-37442

NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/.. to read files...

Directory traversal

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading...

CVE-2021-37442

CVE-2021-37442 affects NCH IVM Attendant v5.12 and earlier. The vulnerability is a directory traversal flaw exploitable through the parameter viewfile?file=/.., enabling an authenticated attacker to read files on the system due to improper path handling. Documents consistently describe this as a ...

CVE-2021-37445

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading...

CVE-2021-37446

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading...

CVE-2021-37446: Improper Limitation of a Pathname to a Restricted Directory

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading...

PT-2021-21659

Name of the Vulnerable Software and Affected Versions NCH Quorum versions 2.03 and earlier Description The issue allows an authenticated user to perform directory traversal, enabling file reading. This is achieved via the "documentprop?file=/.." endpoint. Recommendations For NCH Quorum versions...

CVE-2021-37445: Improper Limitation of a Pathname to a Restricted Directory

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading...

PT-2021-21658

Name of the Vulnerable Software and Affected Versions NCH Quorum versions 2.03 and earlier Description The issue allows an authenticated user to perform directory traversal, enabling file reading. This is achieved via the "logprop?file=/.." endpoint. Recommendations For NCH Quorum versions 2.03 a...

Exploit for CVE-2020-1938

CVE-2020-1938Tomcat-fileinclude and filered Tomcat的文件包含及文件读取漏洞利用POC 文件读取 Usage :python2 "Tomcat-ROOT路径下文件读取CVE-2020-1938.py" -p 8009 -f /test.txt 127.0.0.1 文件包含 Usage :python2 "Tomcat-ROOT路径下文件包含CVE-2020-1938.py" -p 8009 -f /test.txt 127.0.0.1 复现详情：http://www.svenbeast.com/post/fqSI9laE8/ img:...

Arbitrary File Read Vulnerability in Oracle E-Business

Oracle E-Business is a fully integrated suite of global business management software. An arbitrary file read vulnerability exists in Oracle E-Business, which can be exploited by an attacker to obtain sensitive information...

Arbitrary file read vulnerability exists in ShopXO (CNVD-2021-57330)

ShopXO is an open source enterprise-level open source e-commerce system. ShopXO has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

Arbitrary file read vulnerability exists in Node-RED (CNVD-2021-54086)

Node-RED is a tool for building Internet of Things IOT applications that focuses on simplifying the "connectivity" of code blocks to perform tasks. Node-RED suffers from an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...