908 matches found
CVE-2019-19297
A vulnerability has been identified in SiNVR/SiVMS Video Server All versions V5.0.0. The streaming service default port 5410/tcp of the SiVMS/SiNVR Video Server contains a path traversal vulnerability, that could allow an unauthenticated remote attacker to access and download arbitrary files from...
CVE-2020-3937
SQL Injection in SysJust Syuan-Gu-Da-Shih, versions before 20191223, allowing attackers to perform unwanted SQL queries and access arbitrary file in the database...
OPENSUSE-SU-2020:0003-1 Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird was updated to 68.3esr MFSA 2019-38 bsc1158328 Security issues fixed: - CVE-2019-17008: Fixed a use-after-free in worker destruction bmo1546331 - CVE-2019-13722: Fixed a stack corruption due to incorrect number of...
The vulnerability in the vManage web interface of Cisco SD-WAN’s programmatically defined network allows a attacker to bypass authentication procedures and gain access to system files.
The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...
CVE-2019-15600
A Path traversal exists in httpserver which allows an attacker to read arbitrary system files...
QNAP Systems QNAP QTS Incorrect Link Resolution Vulnerability
QNAP Systems QNAP QTS is a Turbo NAS operating system from QNAP Systems. The system provides file storage, management, backup, multimedia applications and security monitoring. A security vulnerability exists in QNAP Systems QNAP QTS, which is caused by the program not properly resolving links. A...
CVE-2019-7195
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions...
ZTE ZXR10 1800-2S suffers from a file read vulnerability (CNVD-2019-46615)
The ZXR10 1800-2S is a router product from China's ZTE Corporation ZTE. A file read vulnerability exists in the ZTE ZXR10 1800-2S. An attacker can exploit this vulnerability to read arbitrary files...
CVE-2019-1385
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate...
PT-2019-4228
Name of the Vulnerable Software and Affected Versions Microsoft Windows AppX Deployment Server affected versions not specified Description The issue is related to insufficient access restrictions in the Windows AppX Deployment Server component, allowing an attacker to elevate their privileges. To...
Belkin Linksys EA6500 Path Traversal Vulnerability
The Belkin Linksys EA6500 is a wireless router from Belkin USA. A path traversal vulnerability exists in the Linksys EA6500, which arises from a failure of a network system or product to properly filter special elements in the path of a resource or file, and can be exploited by an attacker to gai...
CVE-2019-14424
A Local File Inclusion LFI issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to read sensitive files via a simple HTTP Request...
D-Link DIR-412 Authorization Issues Vulnerability
The D-Link DIR-412 is a wireless router from AUO D-Link of Taiwan, China. An authorization issue vulnerability exists in the D-Link DIR-412 A1-1.14WW version, which stems from a failure to ask for authentication on some web pages, and can be exploited by an attacker to gain access to the router's...
Directory Traversal
larvitrouter is vulnerable to directory traversal. Lack of validation in the URL path of requests in the resolve function allows remote attacker to access files outside of the route root using the ../ characters...
PT-2019-4135 · Freebsd · Freebsd
Name of the Vulnerable Software and Affected Versions: FreeBSD versions prior to 12.0-RELEASE-p8 FreeBSD versions prior to 11.3-RELEASE-p1 FreeBSD versions prior to 11.2-RELEASE-p12 Description: The issue is related to the mqueuefs module in FreeBSD, which has inadequate access control. This allo...
CVE-2019-13915
b3log Wide before 1.6.0 allows three types of attacks to access arbitrary files. First, the attacker can write code in the editor, and compile and run it approximately three times to read an arbitrary file. Second, the attacker can create a symlink, and then place the symlink into a ZIP archive. ...
CVE-2019-13915
b3log Wide before 1.6.0 allows three types of attacks to access arbitrary files. First, the attacker can write code in the editor, and compile and run it approximately three times to read an arbitrary file. Second, the attacker can create a symlink, and then place the symlink into a ZIP archive. ...
Path Traversal
Overview All versions of static-resource-server are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation No fix is currently available. Consider using an alternative module until a fix is made available...
Arbitrary File Download Vulnerability in HAND SRM Cloud Platform
HAND SRM Cloud Platform is a one-stop digital management platform based on SaaS service/technology architecture. HAND SRM Cloud Platform suffers from an arbitrary file download vulnerability that can be exploited by attackers to download files uploaded by other users...