CVE-2021-39371

An XML external entity XXE injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected...

PYSEC-2021-121

An XML external entity XXE injection in PyWPS before 4.5.0 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected...

CVE-2021-39371

An XML external entity XXE injection in PyWPS before 4.4.5 allows an attacker to view files on the application server filesystem by assigning a path to the entity. OWSLib 0.24.1 may also be affected...

Cisco SD-WAN vManage Software Path Traversal Vulnerability

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. A path traversal vulnerability exists in the Web management interface in Cisco SD-WAN vManage Software versions 19.2.2 and earlier, which stems from the program failing to...

The vulnerability of the Apache Flex BlazeDS component, a software tool for managing devices in OnCell Central Manager networks, allows a malicious individual to view the content of any file on the server or perform network scanning of both internal and external infrastructure.

The vulnerability of the Apache Flex BlazeDS component, a software tool for managing devices in OnCell Central Manager networks, is related to the lack of protection for operational data. Exploiting this vulnerability allows an attacker to remotely access and view the content of any file on the...

Microsoft Windows Modules Installer Servic Information Disclosure Vulnerability

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An information disclosure vulnerability exists in the Microsoft Windows Modules Installer Service. An attacker could exploit this vulnerability to view any file on the file system with...

WordPress cysteme-finder plugin code issue vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A code issue vulnerability exists in the WordPress cysteme-finder plugin prior to version 1.4, which stems fro...

CVE-2019-11020

Lack of authentication in file-viewing components in DDRT Dashcom Live 2019-05-09 allows anyone to remotely access all claim details by visiting easily guessable dashboard/uploads/claimfiles/claimid URLs...

Authentication flaw

Lack of authentication in file-viewing components in DDRT Dashcom Live 2019-05-09 allows anyone to remotely access all claim details by visiting easily guessable dashboard/uploads/claimfiles/claimid URLs...

CVE-2019-11020

Lack of authentication in file-viewing components in DDRT Dashcom Live 2019-05-09 allows anyone to remotely access all claim details by visiting easily guessable dashboard/uploads/claimfiles/claimid URLs...

CVE-2019-11020

CVE-2019-11020 affects DDRT Dashcom Live. The issue is a lack of authentication in file-viewing components, enabling remote access to claim details via guessable URLs under dashboard/uploads/claim_files/claim_id_... Exploitation status is not detailed in the provided documents; CVSS vectors indic...

WebP Express <= 0.14.10 - Multiple Issues

- Arbitrary File Viewing - CRSF - XSS including https://wpvulndb.com/vulnerabilities/9389 - Unauthorised Access...

CVE-2019-1819

CVE-2019-1819 affects Cisco Prime Infrastructure and Cisco EPN Manager web-based management interfaces. The root cause is improper sanitization of user-supplied input in HTTP request parameters that describe filenames, enabling authenticated remote attackers to perform directory traversal and vie...

Use-After-Free (UAF)

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with...

idreamsoft iCMS Directory Traversal Vulnerability (CNVD-2019-12125)

iCMS is an efficient and simple content management system built with PHP and MySQL. A directory traversal vulnerability exists in the editor/editor.admincp.php file in idreamsoft iCMS version 7.0.13, which can be exploited to view files in a folder with the help of a '...' directory traversal...

CVE-2018-12306

Directory Traversal in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to view arbitrary files by modifying the "file1" URL parameter, a similar issue to CVE-2018-11344...

CVE-2018-12909

Webgrind

MemoCGI vulnerable to directory traversal

Overview MemoCGI provided by ChamaNet contains a directory traversal vulnerability CWE-22. Ikuo Shoji reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A remote attacker may view files on the server. Solution...

CVE-2017-1497

IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the file. IBM X-Force ID: 128695...

WordPress Awesome Support plugin <= 4.3.1 - Authenticated Arbitrary File Viewing Vulnerability

WordPress Awesome Support plugin Authenticated Arbitrary File Viewing Vulnerability exists in the function wpastoolslogviewerview accessible through WordPress’ AJAX functionality in the file /includes/admin/functions-log-viewer.php: Solution Update the plugin...