4831 matches found
CVE-2021-32734: Generation of Error Message Containing Sensitive Information
Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, the Nextcloud Text application shipped with Nextcloud Server returned verbatim exception messages to the user. This could result in a full path disclosure on shared files. The issu...
PT-2021-19894 · Nextcloud +2 · Nextcloud Server +3
Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 19.0.13 Nextcloud Server versions prior to 20.0.11 Nextcloud Server versions prior to 21.0.3 Description: The Nextcloud Text application shipped with Nextcloud Server returned verbatim exception messages to...
CVE-2021-21587
Dell Wyse Management Suite versions 3.2 and earlier contain a full path disclosure vulnerability. A local unauthenticated attacker could exploit this vulnerability in order to obtain the path of files and folders...
White Shark System (WSS) Website Physical Path Disclosure Vulnerability
White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A website physical path disclosure vulnerability exis...
White Shark System information leakage vulnerability
White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A website physical path disclosure vulnerability exis...
dovecot: IMAP hibernation function allows mail access
An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker can trigger unhibernation via attacker-controlled parameters, leading to access to other users' email messages and path disclosure...
Debian DLA-2661-1 : jetty9 security update
Several vulnerabilities were discovered in jetty, a Java servlet engine and webserver. An attacker may reveal cryptographic credentials such as passwords to a local user, disclose installation paths, hijack user sessions or tamper with collocated webapps. CVE-2017-9735 Jetty is prone to a timing...
Dhcms Information Disclosure Vulnerability
DhCms Dinghua Cloud CMS is a content management system based on PHP and MySQL. A security vulnerability exists in Dhcms 2017-09-18. The vulnerability stems from the fact that the program can disclose physical paths. No detailed vulnerability details are provided at this time...
DhCms input validation error vulnerability
DhCms Dinghua Cloud CMS is a content management system based on PHP and MySQL. A security vulnerability exists in Dhcms 2017-09-18. The vulnerability stems from the fact that the program can disclose physical paths. No detailed vulnerability details are provided at this time...
Mail.ru: internal path disclosure via error message
Internal path in error message at activate.games.mail.ru...
CVE-2021-29022
In InvoicePlane 1.5.11, the upload feature discloses the full path of the file upload directory...
CVE-2021-29022
In InvoicePlane 1.5.11, the upload feature discloses the full path of the file upload directory...
PT-2021-18026
Name of the Vulnerable Software and Affected Versions: InvoicePlane version 1.5.11 Description: The issue concerns the upload feature in InvoicePlane, which discloses the full path of the file upload directory. Recommendations: For InvoicePlane version 1.5.11, consider restricting access to the...
CVE-2021-29022: Unrestricted Upload of File with Dangerous Type
In InvoicePlane 1.5.11, the upload feature discloses the full path of the file upload directory...
CVE-2021-26075: Undefined Security Weakness
The Jira importers plugin AttachTemporaryFile rest resource in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before 8.13.4, and from version 8.14.0 before 8.15.1 allowed remote authenticated attackers to obtain the full path of the Jira application data directory via an...
Mini Mouse 9.3.0 - Local File inclusion
Exploit Title: Mini Mouse 9.3.0 - Local File inclusion / Path Traversal Author: gosh Date: 05-04-2021 Vendor Homepage: http://yodinfo.com Software Link: https://apps.apple.com/us/app/mini-mouse-remote-control/id914250948 Version: 9.3.0 Tested on: iPhone; iOS 14.4.2 GET /op=getdeviceinfo HTTP/1.1...
AfterLogic 多个安全漏洞（CVE-2021-26292 CVE-2021-26293 CVE-2021-26294）
CVE-2021-26292 - Public Full Path Disclosure on AfterLogic Aurora & WebMail Pro WebDAV EndPoint The severity of the issue: Medium Complexity: Easy Affected Products: AfterLogic Aurora, AfterLogic WebMail PRO Authentication: Not required Attacks: Full Path Disclosure Resources : -...
[20220302] - Core - Path Disclosure within filesystem error messages
Uploading a file name of an excess length causes the error. This error brings up the screen with the path of the source code of the web application...