GHSA-GPHJ-63H8-R9VQ Moodle directory traversal vulnerability

Directory traversal vulnerability in the mingetslashargument function in lib/configonlylib.php in Moodle through 2.5.9, 2.6.x before 2.6.8, 2.7.x before 2.7.5, and 2.8.x before 2.8.3 allows remote authenticated users to read arbitrary files via a .. dot dot in the file parameter, as demonstrated ...

GHSA-JG55-3Q6H-2CCF Typo3 Backend XSS Vulnerability

An Information Disclosure vulnerability in jumpUrl mechanism, used to track access on web pages and provided files, allows a remote attacker to read arbitrary files on a host. The expected value of a mandatory hash secret, intended to invalidate such requests, is exposed to remote users allowing...

GHSA-HM8G-JXJJ-GFM3 Zope allows remote attackers to read arbitrary files

The docutils module in Zope Zope2 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText reST markup, which allows remote attackers to read arbitrary files via a csvtable directive, a different vulnerability than CVE-2006-3458...

GHSA-VX77-5PF4-C9WR CherryPy Directory traversal vulnerability

Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 allows remote attackers to read arbitrary files via ".." sequences in unspecified vectors...

workflow-cps: Pipeline-related plugins follow symbolic links or do not limit path names

A flaw was found in Jenkins. The Pipeline: Groovy Plugin follows symbolic links to locations outside of the checkout directory for the configured SCM when reading the script file typically Jenkinsfile for Pipelines. This flaw allows attackers who can configure Pipelines to read arbitrary files on...

PT-2022-3580 · Siemens · Sicam A8000 Cp-8050 +1

Name of the Vulnerable Software and Affected Versions: SICAM A8000 CP-8031 versions prior to V4.80 SICAM A8000 CP-8050 versions prior to V4.80 Description: A vulnerability has been identified that allows unauthenticated attackers to access certain files without requiring user authentication. This...

CVE-2022-28543

Path traversal vulnerability in Samsung Flow prior to version 4.8.07.4 allows local attackers to read arbitrary files as Samsung Flow permission...

CVE-2022-28160

Jenkins Tests Selector Plugin 1.3.3 and earlier allows users with Item/Configure permission to read arbitrary files on the Jenkins controller...

PT-2022-18859 · Jenkins · Jenkins Tests Selector Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Tests Selector Plugin version 1.3.3 and earlier Description: The issue allows users with Item/Configure permission to read arbitrary files on the Jenkins controller. Recommendations: For Jenkins Tests Selector Plugin version 1.3.3 and...

OverIT Geocall 代码问题漏洞

OverIT Geocall is a field service management solution from OverIT Italy. A code issue vulnerability exists in OverIT Geocall prior to version 8.0, which originates from an XXE vulnerability that can be exploited by an authenticated user with the Test Trasformazione XSL feature enabled to read...

CVE-2022-26484

An issue was discovered in Veritas InfoScale Operations Manager VIOM before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch 100. The web server fails to sanitize admin/cgi-bin/rulemgr.pl/getfile/ input data, allowing a remote authenticated administrator to read arbitrary files on the system via...

Veritas InfoScale Operations Manager路径遍历漏洞

Veritas Infoscale Operations Manager is a suite of software from Veritas USA for the management of entire InfoScale deployments. Veritas InfoScale Operations Manager is vulnerable to a path traversal vulnerability in the web server admin/cgi-bin/rulemgr.pl/getfile/, which is caused by a lack of...

CVE-2021-43070

Multiple relative path traversal vulnerabilities CWE-23 in FortiWLM management interface 8.6.2 and below, 8.5.2 and below, 8.4.2 and below, 8.3.3 and below, 8.2.2 may allow an authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests...

CVE-2021-44977

In iCMS =8.0.0, a directory traversal vulnerability allows an attacker to read arbitrary files...

iCMS 路径遍历漏洞

iCMS is a software application. An efficient and simple content management system built with PHP and MySQL. A path traversal vulnerability exists in iCMS, which originates in iCMS and can be exploited by an attacker to read arbitrary files...

CVE-2022-23409

The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php...

TransmitMail 跨站脚本漏洞

TransmitMail is a Php-based mail form system from the Japanese individual developer Tagawa Takao. TransmitMail suffers from a cross-site scripting vulnerability that originates from a software input validation error when processing a directory traversal sequence. A remote attacker could use this...

CVE-2021-28376

ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files...

VulnCheck KEV: CVE-2010-4598

Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in an open request...

VulnCheck KEV: CVE-2011-2474

Directory traversal vulnerability in the HTTP Server in Sybase EAServer 6.3.1 Developer Edition allows remote attackers to read arbitrary files via a /.../../\ sequence in a path...