DEBIAN-CVE-2016-1242

fileopen in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors...

PYSEC-2016-41

fileopen in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors...

PYSEC-2016-13

fileopen in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files via the name parameter or unspecified other vectors...

PT-2016-2687

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 10 through 10 before Update 21 Adobe ColdFusion versions 11 through 11 before Update 10 Description The issue is related to an XML External Entity XXE problem in the Office Open XML OOXML feature, allowing remote...

CVE-2016-5049

CVE-2016-5049 is a directory-traversal vulnerability in ReadyDesk 9.1, affecting the chat/openattach.aspx endpoint. The SESID parameter (together with FNAME) can be abused to read arbitrary files via ... path traversal, exposing sensitive data. Impact is read access to files on the server; no exp...

PT-2016-3590

Name of the Vulnerable Software and Affected Versions IBM Tivoli Directory Server ITDS versions 6.1.0 before 6.1.0.74-ISS-ISDS-IF0074 IBM Tivoli Directory Server ITDS versions 6.2.x before 6.2.0.50-ISS-ISDS-IF0050 IBM Tivoli Directory Server ITDS versions 6.3.x before 6.3.0.43-ISS-ISDS-IF0043 IBM...

CVE-2016-4216

XMPCore in Adobe XMP Toolkit for Java before 5.1.3 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2016-5092: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Fortinet FortiWeb before 5.5.3 allows remote authenticated administrators with read and write privileges to read arbitrary files by leveraging the autolearn feature...

CVE-2016-2206

The management console in Symantec Workspace Streaming SWS 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization SWV 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote authenticated users to read arbitrary files by modifying the file-download...

PT-2016-4884

Name of the Vulnerable Software and Affected Versions NetIQ Sentinel versions 7.4.x through 7.4.1 Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the ReportViewServlet servlet. This is achieved via a PREVIEW value for the fileTyp...

The vulnerability of the network virtualization tool for testing software from HP Network Virtualization allows a hacker to read arbitrary files.

The vulnerability of the network virtualization tool for testing software from HP Network Virtualization. Exploiting this vulnerability could allow a malicious actor, operating remotely, to read arbitrary files using a specially crafted URL when accessing components like HttpServlet or...

The vulnerability of the Apache Tomcat software allows a malicious attacker to compromise the confidentiality of protected information.

The vulnerability exists in the java/org/apache/catalina/servlets/DefaultServlet.java file of the standard Apache Tomcat servlet. It stems from incorrect restrictions on XSLT style sheets. This allows malicious actors to bypass security restrictions and read arbitrary files, using a specially...

PT-2016-5254

Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM versions 7.2.x through 7.2.6 Description The issue allows remote authenticated administrators to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference,...

PT-2016-5258

Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM versions 7.2.x through 7.2.6 IBM Security QRadar Incident Forensics versions 7.2.x through 7.2.6 Description A directory traversal issue allows remote attackers to read arbitrary files via a crafted URL. Recommendation...

CVE-2016-5307: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allows remote authenticated users to read arbitrary files in the web-root directory tree via unspecified vectors...

CVE-2016-0298

Directory traversal vulnerability in IBM Security Guardium Database Activity Monitor 10 before 10.0p100 allows remote authenticated users to read arbitrary files via a crafted URL...

PT-2016-4134

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Database Activity Monitor versions prior to 10.0p100 Description A directory traversal issue allows remote authenticated users to read arbitrary files by crafting a URL. Recommendations For versions prior to 10.0p100,...

CVE-2016-1223: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-Free Business Security 9.0 allows remote attackers to read arbitrary files via unspecified vectors...

PT-2016-4649

Name of the Vulnerable Software and Affected Versions Trend Micro Office Scan version 11.0 Trend Micro Worry-Free Business Security Service versions 5.x Trend Micro Worry-Free Business Security version 9.0 Description A directory traversal issue allows remote attackers to read arbitrary files via...

CVE-2016-4449

XML external entity XXE vulnerability in the xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.4, when not in validating mode, allows context-dependent attackers to read arbitrary files or cause a denial of service resource consumption via unspecified vectors...