PT-2016-3643

Name of the Vulnerable Software and Affected Versions IBM Tealeaf Customer Experience versions prior to 8.7.1.8818 IBM Tealeaf Customer Experience versions prior to 8.8.0.9026 IBM Tealeaf Customer Experience version 9.0.0 IBM Tealeaf Customer Experience version 9.0.0A IBM Tealeaf Customer...

DEBIAN-CVE-2016-1231

Directory traversal vulnerability in the HTTP file-serving module modhttpfiles in Prosody 0.9.x before 0.9.9 allows remote attackers to read arbitrary files via a .. dot dot in an unspecified path...

PT-2016-3623

Name of the Vulnerable Software and Affected Versions Zip Attachments plugin versions prior to 1.5.1 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the za file parameter of the download.php file...

PT-2016-3593

Name of the Vulnerable Software and Affected Versions IBM Security QRadar SIEM versions 7.2.x through 7.2.5 before Patch 6 Description A directory traversal issue allows remote authenticated users to read arbitrary files by crafting a URL. Recommendations For IBM Security QRadar SIEM versions 7.2...

PT-2015-7493

Name of the Vulnerable Software and Affected Versions ZTE ZXHN H108N R1A versions before ZTE.bhs.ZXHNH108NR1A.k PE Description The issue is related to an absolute path traversal vulnerability in the cgi-bin/webproc component. This allows remote attackers to read arbitrary files by providing a ful...

CVE-2015-7935

Motorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2015-7935

Motorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via unspecified vectors...

PT-2015-3100

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.2 Description The issue is related to a directory traversal vulnerability in the Mobile Backup module of the Photos application. This vulnerability allows attackers to read arbitrary files via a crafted pathname...

CVE-2015-7081: Undefined Security Weakness

iBooks in Apple iOS before 9.2 and OS X before 10.11.2 allows remote attackers to read arbitrary files via an iBooks file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2015-5322

Directory traversal vulnerability in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to list directory contents and read arbitrary files in the Jenkins servlet resources via directory traversal sequences in a request to jnlpJars/...

CVE-2015-5319

XML external entity XXE vulnerability in the create-job CLI command in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to read arbitrary files via a crafted job configuration that is then used in an "XML-aware tool," as demonstrated by get-job and update-job...

PT-2015-2685

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 2.0 SP2 through 4.6 Description The issue is related to an XML External Entity XXE problem in the XML DTD parser, allowing remote attackers to read arbitrary files via an external entity declaration in...

PT-2015-7496

Name of the Vulnerable Software and Affected Versions Huawei HG532e, HG532n, and HG532s devices affected versions not specified Description A directory traversal issue allows remote attackers to read arbitrary files by including a .. dot dot in an icon/ URI. Recommendations For Huawei HG532e...

The vulnerability of the Microsoft SharePoint Server corporate application allows a hacker to read arbitrary files.

The vulnerability of the InfoPath Forms Services component of the Microsoft SharePoint Server corporate application suite is related to deficiencies in access control mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to read arbitrary files using a specially...

PT-2015-5020

Name of the Vulnerable Software and Affected Versions IniNet embeddedWebServer aka eWebServer versions prior to 2.02 Description A directory traversal issue allows remote attackers to read arbitrary files by providing a crafted pathname. Recommendations For versions prior to 2.02, update to versi...

PT-2015-3312

Name of the Vulnerable Software and Affected Versions VMware vSphere Client versions 5.5 before U3e VMware vSphere Client versions 6.0 before U2a Description The issue is related to an XML External Entity XXE problem, where an XML document containing an external entity declaration in conjunction...

PT-2015-7106

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 4.1.4 build 0910 QNAP QTS versions 4.2.x prior to 4.2.0 RC2 build 0910 Description A directory traversal issue exists when AFP is enabled, allowing remote attackers to read or write to arbitrary files by leveraging...

PT-2015-7577

Name of the Vulnerable Software and Affected Versions WordPress Font plugin versions prior to 7.5.1 Description The issue allows remote administrators to read arbitrary files due to an absolute path traversal vulnerability in the Font.php file of the Font plugin for WordPress. This can be achieve...

SUSE: Security Advisory for MozillaFirefox (SUSE-SU-2015:0412-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2015-2348

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server versions X8.5.1 through X8.5.2 Description The issue exists due to insufficient input validation in the device's firmware, allowing a local attacker to read arbitrary files. Additionally, a symlink...