CVE-2011-1595: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the diskcreate function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. dot dot in a pathname...

CVE-2011-1589

Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers to read arbitrary files via a %2f..%2f encoded slash dot dot slash in a URI...

PT-2011-3336

Name of the Vulnerable Software and Affected Versions HP OpenView Storage Data Protector versions 6.00 through 6.11 Description The issue allows remote attackers to read arbitrary files via directory traversal sequences in a filename in a "GET FILE" message. This is related to a directory travers...

PT-2011-1390

Name of the Vulnerable Software and Affected Versions Orbeon Forms versions prior to 3.9 Description The issue is related to an "XML injection" problem, where the oxf/xml/xerces/XercesSAXParserFactoryImpl.java in the xforms-server component does not properly restrict DTDs in Ajax requests. This...

CVE-2010-3260

oxf/xml/xerces/XercesSAXParserFactoryImpl.java in the xforms-server component in the XForms service in Orbeon Forms before 3.9 does not properly restrict DTDs in Ajax requests, which allows remote attackers to read arbitrary files or send HTTP requests to intranet servers via an entity declaratio...

CVE-2011-1715

Directory traversal vulnerability in framework/source/resource/qx/test/part/delay.php in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to read arbitrary files via ..%2f encoded dot dot sequences in the file parameter...

PT-2011-3280

Name of the Vulnerable Software and Affected Versions WP Custom Pages module version 0.5.0.1 for WordPress Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the wp-download.php file. This is achieved by using ..%2F encoded dot dot...

PT-2011-2161

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.6.7 Description The issue is related to an integer overflow in HFS, which affects local users. This allows them to read arbitrary files, including HFS, HFS+, or HFS+J files, by making a crafted F READBOOTSTRAP ioc...

PT-2011-2607

Name of the Vulnerable Software and Affected Versions nhttpd aka Nostromo webserver versions prior to 1.9.4 Description The issue allows remote attackers to execute arbitrary programs or read arbitrary files via a ..%2f encoded dot dot slash in a URI. This is a directory traversal vulnerability...

PT-2011-2055

Name of the Vulnerable Software and Affected Versions Majordomo versions 20110203 and earlier Description The issue allows remote attackers to conduct directory traversal attacks and read arbitrary files via a ./../ sequence in the extra parameter to the help command. This is due to an incomplete...

PT-2011-2864

Name of the Vulnerable Software and Affected Versions FocalMedia.Net Quick Polls versions prior to 1.0.2 Description The issue allows remote attackers to read or delete arbitrary files due to directory traversal vulnerabilities. This can be achieved by using a .. dot dot in the p parameter in...

PT-2011-2588

Name of the Vulnerable Software and Affected Versions Aptdaemon version 0.40 Description The issue is related to an absolute path traversal vulnerability in the org.debian.apt.UpdateCachePartially method in worker.py. This vulnerability allows local users to read arbitrary files via a full pathna...

PT-2011-2272

Name of the Vulnerable Software and Affected Versions DellSystemLite.ocx version 1.0.0.0 Description The issue allows remote attackers to read arbitrary files via directory traversal sequences in the fileID parameter of the GetData method in the DellSystemLite.Scanner ActiveX control...

CVE-2010-4731: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a...

QuickShare File Share FTP Server < 1.2.2 Directory Traversal Vulnerability - Active Check

QuickShare File Share FTP Server is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-3930: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to read arbitrary files via unspecified vectors related to AjaxSearch, a different vulnerability than CVE-2010-1427...

PT-2011-1669

Name of the Vulnerable Software and Affected Versions Joomla! com jradio component versions prior to 1.5.1 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using directory traversal sequences in the controller parameter to...

PT-2011-1665

Name of the Vulnerable Software and Affected Versions Novell GroupWise versions prior to 8.02HP Description The issue concerns multiple directory traversal vulnerabilities in the WebAccess Agent and Document Viewer Agent components. These vulnerabilities allow remote attackers to read arbitrary...

CVE-2011-0405: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in module.php in PhpGedView 4.2.3 and possibly other versions, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the pgvaction parameter...

PT-2010-5586

Name of the Vulnerable Software and Affected Versions IBM Tivoli Access Manager for e-business version 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX Description The issue allows remote attackers to read arbitrary files via a %uff0e%uff0e encoded dot dot in a URI, which is a directory traversal...