CVE-2015-5650: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in AjaXplorer 2.0 allows remote attackers to read arbitrary files via unspecified vectors...

H2O Directory Traversal Vulnerability

H2O is a set of open source Web server software . H2O suffers from a directory traversal vulnerability. When the program uses the file.dir directive, a remote attacker can exploit the vulnerability to read arbitrary files with the help of a specially crafted URL...

CVE-2015-6459: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in the download feature in FileDownloadServlet in GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 allows remote attackers to read or delete arbitrary files via a full pathname...

PT-2015-3063

Name of the Vulnerable Software and Affected Versions GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise versions prior to 3.1.5 Description The issue is related to an absolute path traversal vulnerability in the download feature of the FileDownloadServlet. This vulnerability allows remot...

Joyent Node.js Geddy Directory Traversal Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on Google V8 JavaScript engine on top of the platform. Geddy is one of the front-end framework. A directory traversal vulnerability exists in the lib/app/index.js file in Joyent Node.js Geddy 13.0.7 and earlier...

CVE-2015-5688

Directory traversal vulnerability in lib/app/index.js in Geddy before 13.0.8 for Node.js allows remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the PATHINFO to the default URI...

SAP Mobile Platform application import XML external entity vulnerability

SAP Mobile Platform SMP is a mobile application development platform from SAP. The platform is used to build packaged and customized development applications for any device. An XML external entity vulnerability exists in the application import feature of SMP version 2.3. A remote attacker can...

PYSEC-2015-39

The import task action in OpenStack Image Service Glance 2015.1.x before 2015.1.2 kilo, when using the V2 API, allows remote authenticated users to read arbitrary files via a crafted backing file for a qcow2 image...

UBUNTU-CVE-2015-5531

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls...

PT-2020-7850

Name of the Vulnerable Software and Affected Versions: ownCloud Server versions prior to 6.0.8 ownCloud Server versions 7.x prior to 7.0.6 ownCloud Server versions 8.x prior to 8.0.4 Description: The issue allows remote administrators of Dropbox.com to read arbitrary files. This is possible due t...

Koha Directory Traversal Vulnerability

Koha is the first open source library automation system. Koha suffers from a directory traversal vulnerability that could be exploited by an attacker to read arbitrary files...

PT-2015-1902

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 39.0.3 Firefox ESR versions prior to 38.1.1 Firefox OS versions prior to 2.2 Description The issue is related to the PDF reader component in Mozilla Firefox, Firefox ESR, and Firefox OS, which lacks protection...

VulnCheck KEV: CVE-2015-4495

Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges...

LXC Directory Traversal Vulnerability

LXC is a user-space interface to the Linux kernel's container functionality that makes it easy for Linux users to create and manage system or application containers through a powerful API and simple tools. A local directory traversal vulnerability exists in LXC, which allows a local attacker to...

PT-2015-6607

Name of the Vulnerable Software and Affected Versions EMC Avamar Server versions 7.0 through 7.1.2 EMC Avamar Virtual Addition AVE versions 7.0 through 7.1.2 Description A directory traversal issue allows remote attackers to read arbitrary files by sending crafted parameters through the Avamar...

Kaseya Virtual System Administrator Directory Traversal Vulnerability

Kaseya Virtual System Administrator VSA is a suite of IT system management platforms for simplifying and automating IT services from Kaseya, Switzerland. A directory traversal vulnerability exists in Kaseya VSA. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP...

PT-2015-5945

Name of the Vulnerable Software and Affected Versions Kaseya Virtual System Administrator VSA versions 7.x before 7.0.0.29 Kaseya Virtual System Administrator VSA versions 8.x before 8.0.0.18 Kaseya Virtual System Administrator VSA versions 9.0 before 9.0.0.14 Kaseya Virtual System Administrator...

PT-2015-1398

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager FastBack version 6.1 before 6.1.12 Description The issue allows remote attackers to read arbitrary files by sending crafted TCP packets to an unspecified port. This is due to a lack of protection for service data in...

OpenStack Cinder Information Disclosure Vulnerability (CNVD-2015-04083)

Cinder is OpenStack's chunked storage service. A security vulnerability exists in OpenStack Cinder, which can be exploited by an authenticated remote user to read arbitrary files by using a constructed graphical qcow2 signature within the upload-to-image command...

PT-2015-5943

Name of the Vulnerable Software and Affected Versions Avigilon Control Center ACC versions 4.0.0 through 4.12.0.53 Avigilon Control Center ACC versions 5.0.0 through 5.4.2.21 Description A directory traversal issue allows remote attackers to read arbitrary files by crafting a help/ URL...