1528 matches found
PT-2010-5564
Name of the Vulnerable Software and Affected Versions Ecava IntegraXor versions 3.6.4000.0 and earlier Description A directory traversal issue allows remote attackers to read arbitrary files by including a .. dot dot in the file name parameter of an open request. Recommendations For versions...
PT-2010-5371
Name of the Vulnerable Software and Affected Versions Camtron CMNC-200 Full HD IP Camera version 1.102A-008 TecVoz CMNC-200 Megapixel IP Camera version 1.102A-008 Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the URI, due to a directory traversal...
CVE-2010-4231: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to read arbitrary files via a .. dot dot in the URI...
PT-2010-5388
Name of the Vulnerable Software and Affected Versions nBill com netinvoice versions prior to 2.0.9 standard edition nBill com netinvoice versions prior to 2.0.10 lite edition nBill com netinvoice version 1.2 10 for Joomla Description The issue allows remote attackers to read arbitrary files via...
CVE-2010-4102
Unspecified vulnerability in HP Insight Recovery before 6.2 allows remote attackers to read arbitrary files via unknown vectors...
PT-2010-5298
Name of the Vulnerable Software and Affected Versions HP Insight Managed System Setup Wizard versions prior to 6.2 Description The issue allows remote attackers to read arbitrary files. Recommendations For versions prior to 6.2, update to version 6.2 or later to resolve the issue...
PT-2010-5295
Name of the Vulnerable Software and Affected Versions HP Insight Control Performance Management versions prior to 6.1 update 2 Description The issue allows remote attackers to read arbitrary files. Recommendations For versions prior to 6.1 update 2, update to version 6.1 update 2 or later to...
CVE-2010-4100: Undefined Security Weakness
Unspecified vulnerability in HP Insight Control Performance Management before 6.1 update 2 allows remote attackers to read arbitrary files via unknown vectors...
PT-2010-5222
Name of the Vulnerable Software and Affected Versions HP Virtual Server Environment versions prior to 6.2 Description The issue allows remote attackers to read arbitrary files. The exact vectors used for the attack are not specified. Recommendations For versions prior to 6.2, update to version 6....
CVE-2010-3990: Undefined Security Weakness
Unspecified vulnerability in HP Virtual Server Environment before 6.2 allows remote attackers to read arbitrary files via unknown vectors...
CVE-2010-3986: Undefined Security Weakness
Unspecified vulnerability in HP Virtual Connect Enterprise Manager VCEM 6.0 and 6.1 allows remote attackers to read arbitrary files via unknown vectors...
PT-2010-5218
Name of the Vulnerable Software and Affected Versions HP Virtual Connect Enterprise Manager versions 6.0 through 6.1 Description The issue allows remote attackers to read arbitrary files. Recommendations For HP Virtual Connect Enterprise Manager versions 6.0 through 6.1, at the moment, there is n...
PT-2010-4711
Name of the Vulnerable Software and Affected Versions HP Systems Insight Manager SIM versions 6.0 through 6.1 Description The issue allows remote attackers to read arbitrary files. Recommendations For HP Systems Insight Manager SIM versions 6.0 through 6.1, at the moment, there is no information...
PT-2010-5037
Name of the Vulnerable Software and Affected Versions Visual Synapse HTTP Server versions 0.60 and earlier, 1.0 RC1 through RC3 Description A directory traversal issue allows remote attackers to read arbitrary files by including a .. dot dot in the URI. This could potentially expose sensitive...
PT-2010-1184
Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 9.0.1 and earlier Description The issue allows remote attackers to read arbitrary files due to directory traversal vulnerabilities in the administrator console. This is achieved via the locale parameter to various...
CVE-2010-2920: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the Foobla Suggestions comfooblasuggestions component 1.5.1.2 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php...
CVE-2010-2313: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in Anodyne Productions SIMM Management System SMS 2.6.10, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the page parameter to index.php. NOTE: some of these details are obtained from third party...
CVE-2010-2073: Use of Hard-coded Credentials
authdbconfig.py in Pyftpd 0.8.4 contains hard-coded usernames and passwords for the 1 test, 2 user, and 3 roxon accounts, which allows remote attackers to read arbitrary files from the FTP server...
CVE-2010-2269: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in loadstatic.cgi in Accoria Web Server aka Rock Web Server 1.4.7 allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...
