CVE-2020-8209

Citrix XenMobile Server (XenMobile) is affected by a Local File Inclusion/Path Traversal vulnerability (CVE-2020-8209). Affected versions are Citrix XenMobile Server 10.12 before RP2, 10.11 before RP4, 10.10 before RP6, and earlier than 10.9 RP5. Root cause is improper access control that allows ...

CVE-2020-8222

A path traversal vulnerability exists in Pulse Connect Secure 9.1R8 that allowed an authenticated attacker via the administrator web interface to perform an arbitrary file reading vulnerability through Meeting...

Path traversal

A path traversal vulnerability exists in Pulse Connect Secure 9.1R8 that allowed an authenticated attacker via the administrator web interface to perform an arbitrary file reading vulnerability through Meeting...

CVE-2020-8222

CVE-2020-8222 describes a path-traversal vulnerability in Pulse Connect Secure versions older than 9.1R8. An authenticated attacker, using the administrator web interface (via Meeting), can read arbitrary files due to the underlying file-reading weakness. Connected sources (Red Hat advisory, Ness...

CVE-2020-8222

A path traversal vulnerability exists in Pulse Connect Secure 9.1R8 that allowed an authenticated attacker via the administrator web interface to perform an arbitrary file reading vulnerability through Meeting...

CVE-2020-8222: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability exists in Pulse Connect Secure 9.1R8 that allowed an authenticated attacker via the administrator web interface to perform an arbitrary file reading vulnerability through Meeting...

Khan Academy: CSV Injection Via Student Password/Name Leads To Client Side RCE And Reading Client Files

Insufficient CSV escaping could result in our site generating an unsafe CSV file for an end user under certain conditions. See the reporter's summary for more. Two CSV Injection Issues Was Discovered On Khan's Teacher CSV Export Function, That Could Allow Client Site Remote Code Execution, And...

PT-2020-14458

Name of the Vulnerable Software and Affected Versions INNEO Startup TOOLS versions 2017 M021 12.0.66.3784 through 2018 M040 13.0.70.3804 Description An issue in the sut srv.exe web application allows user input to be included into a filesystem access without validation, potentially enabling an...

CVE-2020-8214

A path traversal vulnerability in servey version 3 allows an attacker to read content of any arbitrary file...

CVE-2020-15100 Uncontrolled Resource Consumption in freewvs

In freewvs before 0.1.1, a user could create a large file that freewvs will try to read, which will terminate a scan process. This has been patched in 0.1.1...

CmsEasyQA bounty Q&A system there are arbitrary file reading vulnerabilities in Siping City, China.

CmsEasyQA Reward Q&A System is a php Q&A system developed in PHP+MySQL. Siping City, Jiuzhou Yi Tong Technology Co., Ltd CmsEasyQA reward Q&A system has an arbitrary file reading vulnerability, an attacker can use the vulnerability to read arbitrary files...

CVE-2020-15507

An arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to read files on the system via unspecified vectors...

CVE-2020-15507

An arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to read files on the system via unspecified vectors...

CVE-2020-15507

CVE-2020-15507 describes an arbitrary file reading vulnerability in MobileIron Core, affecting versions 10.3.0.3 and earlier, 10.4.x, 10.5.x, and 10.6.0.0, that allows a remote attacker to read files on the system via unspecified vectors. The Red Hat/NVD entries and related advisories confirm thi...

CVE-2020-15507

An arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to read files on the system via unspecified vectors...

PT-2020-14467

Name of the Vulnerable Software and Affected Versions MobileIron Core versions 10.3.0.3 and earlier MobileIron Core versions 10.4.0.0 through 10.4.0.3 MobileIron Core versions 10.5.1.0 through 10.5.2.0 MobileIron Core version 10.6.0.0 Description The issue allows remote attackers to read files on...

CVE-2020-15507: Undefined Security Weakness

An arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to read files on the system via unspecified vectors...

CVE-2019-9944

In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files from imported image filesets may circumvent OMERO permissions restrictions. This occurs because the Bio-Formats feature allows an image file to have embedded pathnames...

CVE-2019-9944

In Open Microscopy Environment OMERO.server 5.0.0 through 5.6.0, the reading of files from imported image filesets may circumvent OMERO permissions restrictions. This occurs because the Bio-Formats feature allows an image file to have embedded pathnames...

CVE-2019-9944

In Open Microscopy Environment OMERO.server 5.0.0–5.6.0, the Bio-Formats feature enables an image file to carry embedded pathnames, permitting reading of files from imported image filesets that may bypass OMERO permissions restrictions. This is the concrete vulnerability described for CVE-2019-99...