PT-2016-4647

Name of the Vulnerable Software and Affected Versions futomi MP Form Mail CGI Professional Edition versions 3.2.3 and earlier Description A directory traversal issue allows remote authenticated administrators to read arbitrary files. The estimated number of potentially affected devices worldwide ...

PT-2016-5649 · Xstream +1 · Xstream +1

Name of the Vulnerable Software and Affected Versions: XStream versions prior to 1.4.9 Description: The issue concerns multiple XML external entity XXE vulnerabilities in various drivers of XStream. These vulnerabilities allow remote attackers to read arbitrary files via a crafted XML document. N...

UBUNTU-CVE-2015-4176

fs/namespace.c in the Linux kernel before 4.0.2 does not properly support mount connectivity, which allows local users to read arbitrary files by leveraging user-namespace root access for deletion of a file or directory...

PT-2016-5784

Name of the Vulnerable Software and Affected Versions dotCMS versions prior to 3.5.1 Description The issue allows remote authenticated administrators to read arbitrary files. This is achieved by exploiting a directory traversal vulnerability in the dotTailLogServlet, specifically by using a .. do...

DEBIAN-CVE-2016-2055

xymond/xymond.c in xymond in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow remote attackers to read arbitrary files in the configuration directory via a "config" command...

PT-2016-5803

Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator OMSA version 8.2 Description A directory traversal issue allows remote authenticated administrators to read arbitrary files by using a .. dot dot backslash in the file parameter to the ViewFile endpoint...

CVE-2016-4004: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Dell OpenManage Server Administrator OMSA 8.2 allows remote authenticated administrators to read arbitrary files via a ..\ dot dot backslash in the file parameter to ViewFile...

CVE-2016-2340

The AMF framework in Granite Data Services 3.1.1-SNAPSHOT allows remote authenticated users to read arbitrary files, send TCP requests to intranet servers, or cause a denial of service via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entit...

CVE-2016-0245

The XML parser in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF10 allows remote authenticated users to read arbitrary files or cause a denial of service via an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE...

DEBIAN-CVE-2013-7448

Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get...

PT-2016-1596

Name of the Vulnerable Software and Affected Versions DidiWiki affected versions not specified Description The issue is related to a directory traversal vulnerability in the wiki.c component of DidiWiki. This vulnerability allows remote attackers to read arbitrary files by exploiting the page...

CVE-2016-0752

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing...

PT-2016-1283

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.4 SAP Manufacturing Integration and Intelligence xMII component version 15.0 Description The issue is related to a directory traversal vulnerability in the SAP Manufacturing Integration and Intelligence xMII component...

CVE-2016-0752: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing...

CVE-2016-1525

Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticated users to read arbitrary files via a .. dot dot in the realName parameter...

CVE-2016-0882

EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

PT-2016-4441

Name of the Vulnerable Software and Affected Versions EMC Documentum xCP versions 2.1 through 2.1 before patch 23 EMC Documentum xCP versions 2.2 through 2.2 before patch 11 Description The issue allows remote authenticated users to read arbitrary files via a POST request containing an XML extern...

Mageia: Security Advisory (MGASA-2016-0060)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2015-8794

Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via a full pathname in the alt parameter, related to contact photo handling...

CVE-2015-8770

Directory traversal vulnerability in the setskin function in program/include/rcmailoutputhtml.php in Roundcube before 1.0.8 and 1.1.x before 1.1.4 allows remote authenticated users with certain permissions to read arbitrary files or possibly execute arbitrary code via a .. dot dot in the skin...