CVE-2013-3005: Undefined Security Weakness

The TFTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, when RBAC is enabled, allows remote authenticated users to bypass intended file-ownership restrictions, and read or overwrite arbitrary files, via unspecified vectors...

PT-2013-4089

Name of the Vulnerable Software and Affected Versions IBM AIX versions 6.1 and 7.1 VIOS version 2.2.2.2-FP-26 SP-02 Description The issue allows remote authenticated users to bypass intended file-ownership restrictions and read or overwrite arbitrary files when RBAC is enabled. Recommendations Fo...

CVE-2013-3925

CVE-2013-3925 affects Atlassian Crowd prior to version 2.5.4, 2.6.x prior to 2.6.3, as well as 2.3.8 and 2.4.9. The flaw is an XML External Entity (XXE) vulnerability that enables remote attackers to read arbitrary files and cause requests to intranet servers by crafting a request to /services/2 ...

PT-2013-1375

Name of the Vulnerable Software and Affected Versions Echo versions prior to 2.1.1 Echo versions 3.x prior to 3.0.b6 Description The issue allows remote attackers to read arbitrary files via a request containing an external entity declaration in conjunction with an entity reference, related to an...

PT-2013-1828

Name of the Vulnerable Software and Affected Versions Zend Framework versions 1.11.x through 1.11.14 Zend Framework versions 1.12.x through 1.12.0 Description The issue allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service...

PT-2013-2518

Name of the Vulnerable Software and Affected Versions MatrikonOPC A&E Historian version 1.0.0.0 Description The issue allows remote attackers to read and delete arbitrary files via a crafted URL, specifically due to a directory traversal vulnerability in the web interface of the Health Monitor...

PT-2013-2924

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution affected versions not specified Description A directory traversal issue allows remote attackers to read arbitrary files by using a crafted URL. Recommendations At the moment, there is no...

CVE-2013-0673: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web interface in the Health Monitor service in MatrikonOPC A&E Historian 1.0.0.0 allows remote attackers to read and delete arbitrary files via a crafted URL...

PT-2013-1788

Name of the Vulnerable Software and Affected Versions HP LaserJet versions prior to firmware 52.x HP LaserJet 4xxx versions prior to firmware 52.x HP LaserJet 5200 versions prior to firmware 52.x HP LaserJet 90xx versions prior to firmware 52.x HP LaserJet M30xx versions prior to firmware 52.x HP...

CVE-2012-5221: Undefined Security Weakness

Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise P3015; Color LaserJet 3xxx, 47xx, 5550, 9500, CM60xx, CP35xx, CP4005, and CP6015; Color LaserJet Enterprise CP4xxx; and...

PT-2013-4246

Name of the Vulnerable Software and Affected Versions phpMyAdmin versions prior to 4.0.0-rc3 Description The issue concerns a directory traversal vulnerability in the Export feature. This allows remote authenticated users to read arbitrary files or possibly have unspecified other impact via a...

PT-2013-1709

Name of the Vulnerable Software and Affected Versions Invensys Wonderware Win-XML Exporter version 1522.148.0.0 Description The issue allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service through CPU and memory consumption. This is...

PT-2013-2524

Name of the Vulnerable Software and Affected Versions Siemens WinCC versions prior to 7.2 SIMATIC PCS7 versions prior to 8.0 SP1 Description A directory traversal issue in the web server allows remote authenticated users to read arbitrary files by querying a pathname. Recommendations For Siemens...

PT-2013-2243

Name of the Vulnerable Software and Affected Versions ZoneMinder versions 1.24.x before 1.24.4 Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the view, request, or action parameter. This can be exploited by including the .. dot dot sequence in the...

PT-2013-3286

Name of the Vulnerable Software and Affected Versions Indusoft Studio versions 7.0 and earlier Advantech Studio versions 7.0 and earlier Description The issue allows remote attackers to read arbitrary files by providing a full pathname in an argument to the sub 401A90 CreateFileW function, due to...

PT-2013-1408 · Gnome +3 · Gnome Evolution +3

Name of the Vulnerable Software and Affected Versions: GNOME Evolution versions prior to 3.2.3 Description: The issue allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a "mailto:" URL, which attaches the file to the email. This enables attackers to acce...

CVE-2012-6531

1 ZendDom, 2 ZendFeed, and 3 ZendSoap in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 do not properly handle SimpleXMLElement classes, which allow remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC...

CVE-2012-6522: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the getContent function in codes/wcms.php in w-CMS 2.01 allows remote attackers to read arbitrary files via a .. dot dot in the p parameter. NOTE: some of these details are obtained from third party information...

PT-2012-5520

Name of the Vulnerable Software and Affected Versions EMC Data Protection Advisor DPA versions 5.6 through 5.8 SP4 Description A directory traversal issue in the Web UI of EMC Data Protection Advisor allows remote attackers to read arbitrary files. Recommendations For versions 5.6 through 5.8 SP4...

PT-2012-6264

Name of the Vulnerable Software and Affected Versions VMware vCenter Server Appliance vCSA versions 5.0 before Update 2 VMware vCenter Server Appliance vCSA versions 5.1 before Patch 1 Description A directory traversal issue allows remote authenticated users to read arbitrary files via unspecifie...