PT-2015-4973

Name of the Vulnerable Software and Affected Versions Ektron Content Management System CMS versions 8.5 through 8.7 before 8.7sp2 Ektron Content Management System CMS version 9.0 before sp1 Description The issue allows remote attackers to read arbitrary files via an external entity declaration in...

CVE-2015-1579: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the img parameter in a revslidershowimage action to wp-admin/admin-ajax.php. NOTE: this vulnerability may be a duplicate of CVE-2014-9734...

PT-2015-1603

Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.5.9 Moodle versions 2.6.x before 2.6.8 Moodle versions 2.7.x before 2.7.5 Moodle versions 2.8.x before 2.8.3 Description The issue exists due to incorrect restriction of the directory path name in the min get slash...

Fortinet FortiAuthenticator Directory Traversal Vulnerability

Fortinet FortiAuthenticator is a series of secure authentication solutions that identify and interface with FortiToken™ two-factor authentication tokens for secure remote access. A directory traversal vulnerability in Fortinet FortiAuthenticator 3.0.0 allows a local user to read arbitrary files v...

WebSVN Directory Traversal Vulnerability

WebSVN is a tool for viewing source code repositories online. A directory traversal vulnerability exists in WebSVN 2.3.3, which allows an authenticated, remote user to read arbitrary files via a symbolic link attack in this commit...

CVE-2013-6892

WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit...

McAfee ePolicy Orchestrator XML External Entity Vulnerability

McAfee ePolicy Orchestrator is a set of scalable security management software from the U.S. company McAfee McAfee. An XML external entity vulnerability exists in McAfee ePolicy Orchestrator versions prior to 4.6.9, and 5.x versions prior to 5.1.2, which could allow an authenticated, remote attack...

CVE-2011-5310: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...

PT-2014-7073

Name of the Vulnerable Software and Affected Versions IBM WebSphere Service Registry and Repository WSRR versions 7.5.x through 7.5.0.4 IBM WebSphere Service Registry and Repository WSRR versions 8.0.x before 8.0.0.3 IBM WebSphere Service Registry and Repository WSRR versions 8.5.x before 8.5.0.1...

PT-2014-8388

Name of the Vulnerable Software and Affected Versions Cisco Enterprise Content Delivery System ECDS affected versions not specified Description A directory traversal issue allows remote attackers to read arbitrary files by using a crafted URL. Recommendations At the moment, there is no informatio...

PT-2014-8701

Name of the Vulnerable Software and Affected Versions Lexmark MarkVision Enterprise versions prior to 2.1 Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the ReportDownloadServlet servlet. Recommendations For versions prior to 2....

PT-2014-8926

Name of the Vulnerable Software and Affected Versions Alfresco Community Edition versions prior to 5.0.a Description A server-side request forgery SSRF issue exists, allowing remote attackers to trigger outbound requests to intranet servers, conduct port scans, and read arbitrary files via a...

CVE-2014-9301: Undefined Security Weakness

Server-side request forgery SSRF vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers to trigger outbound requests to intranet servers, conduct port scans, and read arbitrary files via a crafted URI in the endpoint parameter...

CVE-2014-9155

Directory traversal vulnerability in the Avatar Uploader module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.0-beta6 for Drupal allows remote authenticated users to read arbitrary files via a .. dot dot in the path of a cropped picture in the uploader panel...

PT-2014-8855

Name of the Vulnerable Software and Affected Versions Drupal Avatar Uploader module versions 6.x-1.x before 6.x-1.2 Drupal Avatar Uploader module versions 7.x-1.x before 7.x-1.0-beta6 Description The issue allows remote authenticated users to read arbitrary files via a .. dot dot in the path of a...

PT-2014-8737

Name of the Vulnerable Software and Affected Versions Paid Memberships Pro plugin versions prior to 1.7.15 Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the QUERY STRING in a getfile action to "wp-admin/admin-ajax.php". This is a directory traversal...

UBUNTU-CVE-2014-3625

Directory traversal vulnerability in Pivotal Spring Framework 3.0.4 through 3.2.x before 3.2.12, 4.0.x before 4.0.8, and 4.1.x before 4.1.2 allows remote attackers to read arbitrary files via unspecified vectors, related to static resource handling...

PT-2014-7040

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager versions prior to 6.0.0.3 IF14 Description A directory traversal issue allows remote attackers to read arbitrary files. Recommendations For versions prior to 6.0.0.3 IF14, update to version 6.0.0.3 IF14 or later t...

CVE-2014-6032: Undefined Security Weakness

Multiple XML External Entity XXE vulnerabilities in the Configuration utility in F5 BIG-IP LTM, ASM, GTM, and Link Controller 11.0 through 11.6.0 and 10.0.0 through 10.2.4, AAM 11.4.0 through 11.6.0, ARM 11.3.0 through 11.6.0, Analytics 11.0.0 through 11.6.0, APM and Edge Gateway 11.0.0 through...

PT-2014-2676

Name of the Vulnerable Software and Affected Versions Dell EqualLogic PS4000 version 6.0 Description A directory traversal issue allows remote attackers to read arbitrary files by using a .. dot dot in the default URI. Recommendations For version 6.0, update the firmware to a version that address...