Joomla! 2.5.x < 3.9.14 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A path disclosure exists in versions 3.8.0 to 3.9.13 due to a missing access check in framework files CVE-2019-19845 - SQL injection vulnerabilities exist in versions 2.5.0 ...

PT-2020-7328

Name of the Vulnerable Software and Affected Versions: NextGEN Gallery Plugin for WordPress versions 1.9.10 through 1.9.11 Description: The issue is related to a Path Disclosure Vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or...

CVE-2013-0291: Exposure of Sensitive Information to an Unauthorized Actor

NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability...

Joomla! 3.8.0 - 3.9.13 Path Disclosure Vulnerability

Joomla! is prone to a path disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescriptio...

CVE-2019-19845

In Joomla! before 3.9.14, a missing access check in framework files could lead to a path disclosure...

CVE-2019-19845

In Joomla! before 3.9.14, a missing access check in framework files could lead to a path disclosure...

CVE-2019-19845

In Joomla! before 3.9.14, a missing access check in framework files could lead to a path disclosure...

CVE-2019-19845

In Joomla! before 3.9.14, a missing access check in framework files could lead to a path disclosure...

CVE-2019-19845

CVE-2019-19845 affects Joomla! prior to 3.9.14. The root cause is a missing access check in framework files, which can lead to a path disclosure. This vulnerability is documented across multiple sources (e.g., Red Hat, Nessus/Nessus plugin 98936, CVE databases) and is specifically tied to Joomla!...

Path Traversal Vulnerability in Joomla!

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A path traversal vulnerability exists in versions of Joomla! prior to 3.9.14, which can be exploited by an attacker to disclose paths...

PT-2019-15976

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 3.9.14 Description A missing access check in framework files could lead to a path disclosure. Recommendations For versions prior to 3.9.14, update to version 3.9.14 or later to resolve the issue...

CVE-2019-19845: Improper Limitation of a Pathname to a Restricted Directory

In Joomla! before 3.9.14, a missing access check in framework files could lead to a path disclosure...

Joomla 2.5.x < 3.9.14 Multiple Vulnerabilities (5781-joomla-3-9-14)

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.14. It is, therefore, affected by multiple vulnerabilities. - Missing access check in framework files could lead to a path disclosure. CVE-2019-19845 - The lack of validation of...

CVE-2019-16559: Incorrect Default Permissions

A missing permission check in Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows attackers with Overall/Read permission to perform connection tests and determine whether files with an attacker-specified path exist on the Jenkins master file system...

CVE-2019-18331

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could gain access to path and filenames on the server by sending specifically crafted packets to 1099/tcp. Please note that an attacke...

PT-2019-15825

Name of the Vulnerable Software and Affected Versions Squiz Matrix CMS versions 5.5.0 through 5.5.0.2 Squiz Matrix CMS versions 5.5.1 through 5.5.1.7 Squiz Matrix CMS versions 5.5.2 through 5.5.2.3 Squiz Matrix CMS versions 5.5.3 through 5.5.3.2 Description An issue in the File Upload field type...

Nokia IMPACT path traversal vulnerability (CNVD-2019-44224)

Nokia IMPACT is a suite of intelligent management platforms for the Internet of Things IoT from the Finnish company Nokia. A path traversal vulnerability exists in Nokia IMPACT. An attacker can exploit this vulnerability to disclose the full path...

CVE-2019-17404

Nokia IMPACT 18A: allows full path disclosure...

CVE-2019-17404

Nokia IMPACT 18A: allows full path disclosure...

CVE-2019-17404

CVE-2019-17404 concerns Nokia IMPACT before version 18A, where a path traversal flaw allows an attacker to disclose the full filesystem path. The issue is described across multiple sources (CNVD-2019-44224, Red Hat RH:CVE-2019-17404, NVD CVE-2019-17404). The connected documents do not provide exp...