CVE-2022-35403

Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure vulnerability via ticket-creation email. This also affects Asset Explorer before 6977 with authentication...

CVE-2022-35403

Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure vulnerability via ticket-creation email. This also affects Asset Explorer before 6977 with authentication...

Arbitrary file deletion

Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure vulnerability via ticket-creation email. This also affects Asset Explorer before 6977 with authentication...

CVE-2022-35403

Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure vulnerability via ticket-creation email. This also affects Asset Explorer before 6977 with authentication...

CVE-2022-35403

CVE-2022-35403 affects Zoho ManageEngine SDP before 13008, SDP MSP before 10606, SupportCenter Plus before 11022, and Asset Explorer before 6977 (authenticated). The issue is an unauthenticated local file disclosure via ticket-creation email. Red Hat and Nessus entries corroborate affected versio...

CVE-2022-35403: Undefined Security Weakness

Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure vulnerability via ticket-creation email. This also affects Asset Explorer before 6977 with authentication...

PT-2022-22805

Name of the Vulnerable Software and Affected Versions ServiceDesk Plus versions prior to 13008 ServiceDesk Plus MSP versions prior to 10606 SupportCenter Plus versions prior to 11022 Asset Explorer versions prior to 6977 Description The issue is related to an unauthenticated local file disclosure...

CVE-2020-4138

IBM SiteProtector Appliance 3.1.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 174049...

CVE-2021-3779: Externally Controlled Reference to a Resource in Another Sphere

A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorization from the user. This issue was resolved in version 2.10.0 and later...

CVE-2022-31261

An XXE issue was discovered in Morpheus through 5.2.16 and 5.4.x through 5.4.4. A successful attack requires a SAML identity provider to be configured. In order to exploit the vulnerability, the attacker must know the unique SAML callback ID of the configured identity source. A remote attacker ca...

XML External Entity (XXE) Injection

Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection in the SAX parse. An attacker can access sensitive information by submitting XML input referencing external entities. Details XXE Injection is a type of attack against an application that parses XML...

XML External Entity (XXE) Injection

Overview UmbracoCms.Core is an ASP.NET CMS. Affected versions of this package are vulnerable to XML External Entity XXE Injection via importDocumenttype.aspx.cs. Exploiting this vulnerability allows the attacker to obtain sensitive information by reading files on the server or sending TCP request...

GHSA-WP2F-HRG2-3R5M Improper Restriction of XML External Entity Reference in Apache uimaj

In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion XXE capability of various XML parsers. UIMA as part of its...

CVE-2022-29302

SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/SolarFtp.php...

CVE-2022-29302

SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/SolarFtp.php...

CVE-2022-29302

SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/SolarFtp.php...

Design/Logic Flaw

SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/SolarFtp.php...

CVE-2022-29302

CVE-2022-29302 affects SolarView Compact ver.6.00. The vulnerability is a local file disclosure via the hidden page at /html/Solar_Ftp.php, allowing a remote attacker to read and/or alter arbitrary files on the web server (local file disclosure). The related documents confirm this vulnerability a...

CVE-2022-29302

SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/SolarFtp.php...

Contec SolarView Compact 安全漏洞

Contec SolarView Compact is an application system from Contec Japan. It provides a photovoltaic power generation measurement system. A security vulnerability exists in Contec SolarView Compact version 6.00, which originates from a local file disclosure vulnerability in /html/SolarFtp.php in...