PT-2014-3866

Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 2.x through 2.5.4 Cybozu Garoon versions 3.x through 3.7 SP3 Description A directory traversal issue exists in the download feature, allowing remote authenticated users to read arbitrary files. Recommendations For Cybozu...

PT-2014-4555

Name of the Vulnerable Software and Affected Versions McAfee ePolicy Orchestrator ePO versions prior to 4.6.7 Hotfix 940148 Description The issue allows remote authenticated users with permissions to add dashboards to read arbitrary files by importing a crafted XML file, related to an XML Externa...

CVE-2014-2205: Undefined Security Weakness

The Import and Export Framework in McAfee ePolicy Orchestrator ePO before 4.6.7 Hotfix 940148 allows remote authenticated users with permissions to add dashboards to read arbitrary files by importing a crafted XML file, related to an XML External Entity XXE issue...

PT-2014-3895

Name of the Vulnerable Software and Affected Versions IBM Cognos Business Intelligence BI version 8.4.1 IBM Cognos Business Intelligence BI versions 10.1 through 10.1 before IF6 IBM Cognos Business Intelligence BI versions 10.1.1 through 10.1.1 before IF5 IBM Cognos Business Intelligence BI...

CVE-2013-5014: Undefined Security Weakness

The management console in Symantec Endpoint Protection Manager SEPM 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote attackers to read arbitrary files via XML data containing an external enti...

CVE-2013-1904

Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8.6 allows remote attackers to read arbitrary files via a full pathname in the value parameter for the genericmessagefooter setting in a save-perf action to index.php, as exploite...

PT-2014-4264

Name of the Vulnerable Software and Affected Versions MARC::File::XML module versions prior to 1.0.2 Description The issue allows context-dependent attackers to read arbitrary files via a crafted XML file, potentially affecting products such as Evergreen, Koha, and perl4lib that utilize the...

CVE-2013-6030: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability on the Emerson Network Power Avocent MergePoint Unity 2016 aka MPU2016 KVM switch with firmware 1.9.16473 allows remote attackers to read arbitrary files via unspecified vectors, as demonstrated by reading the /etc/passwd file...

CVE-2013-6447

Multiple XML External Entity XXE vulnerabilities in the 1 ExecutionHandler, 2 PollHandler, and 3 SubscriptionHandler classes in JBoss Seam Remoting in JBoss Seam 2 framework 2.3.1 and earlier, as used in JBoss Web Framework Kit, allow remote attackers to read arbitrary files and possibly have oth...

PT-2014-3269

Name of the Vulnerable Software and Affected Versions Horizon Quick Content Management System QCMS versions 4.0 and earlier Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by utilizing a .. dot dot in the start parameter. Recommendations For...

PT-2013-5452

Name of the Vulnerable Software and Affected Versions HOT HOTBOX router version 2.1.11 Description A directory traversal issue allows remote attackers to read arbitrary files by including a .. dot dot in a URI. For example, a request for "/etc/passwd" can be used to exploit this issue...

PT-2013-5549

Name of the Vulnerable Software and Affected Versions IBM FileNet Business Process Framework version 4.1.0 Description The issue allows remote authenticated users to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction...

CVE-2013-3042

Directory traversal vulnerability in the server in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3.x and 4.x before 4.0.5 allows local users to read arbitrary files via vectors involving temporary files...

Directory traversal

Directory traversal vulnerability in RockMongo 1.1.5 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the ROCKLANG cookie, as demonstrated in a login.index action to index.php...

PT-2013-5366

Name of the Vulnerable Software and Affected Versions RockMongo versions 1.1.5 and earlier Description The issue allows remote attackers to read arbitrary files by exploiting a directory traversal vulnerability. This can be achieved by including a .. dot dot in the ROCK LANG cookie, as seen in a...

UBUNTU-CVE-2013-4524

Directory traversal vulnerability in repository/filesystem/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to read arbitrary files via a .. dot dot in a path...

CVE-2013-4524

Directory traversal vulnerability in repository/filesystem/lib.php in Moodle through 2.2.11, 2.3.x before 2.3.10, 2.4.x before 2.4.7, and 2.5.x before 2.5.3 allows remote authenticated users to read arbitrary files via a .. dot dot in a path...

PT-2013-4746

Name of the Vulnerable Software and Affected Versions SavySoda WiFi HD Free versions prior to 7.0 Description A directory traversal issue allows remote attackers to read arbitrary files by including a ..%2f encoded dot dot slash in a GET request to specific API endpoints, such as "/api/v1/files"...

Directory traversal

Directory traversal vulnerability in Gummy Bear Studios FTP Drive + HTTP Server 1.0.4 and earlier allows remote attackers to read arbitrary files via a ..%2f encoded dot dot slash in a GET request...

PT-2013-5993

Name of the Vulnerable Software and Affected Versions IBM Rational Service Tester versions 8.3.x through 8.5.x IBM Rational Performance Tester versions 8.3.x through 8.5.x Description The issue allows remote attackers to read arbitrary files. Recommendations For IBM Rational Service Tester versio...