CVE-2022-26484

An issue was discovered in Veritas InfoScale Operations Manager VIOM before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch 100. The web server fails to sanitize admin/cgi-bin/rulemgr.pl/getfile/ input data, allowing a remote authenticated administrator to read arbitrary files on the system via...

Veritas InfoScale Operations Manager路径遍历漏洞

Veritas Infoscale Operations Manager is a suite of software from Veritas USA for the management of entire InfoScale deployments. Veritas InfoScale Operations Manager is vulnerable to a path traversal vulnerability in the web server admin/cgi-bin/rulemgr.pl/getfile/, which is caused by a lack of...

PT-2022-17896

Name of the Vulnerable Software and Affected Versions Veritas InfoScale Operations Manager versions prior to 7.4.2 Patch 600 Veritas InfoScale Operations Manager versions 8.x prior to 8.0.0 Patch 100 Description The web server in Veritas InfoScale Operations Manager fails to sanitize input data f...

CVE-2021-43070

Multiple relative path traversal vulnerabilities CWE-23 in FortiWLM management interface 8.6.2 and below, 8.5.2 and below, 8.4.2 and below, 8.3.3 and below, 8.2.2 may allow an authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests...

CVE-2022-24683: Undefined Security Weakness

HashiCorp Nomad and Nomad Enterprise 0.9.2 through 1.0.17, 1.1.11, and 1.2.5 allow operators with read-fs and alloc-exec or job-submit capabilities to read arbitrary files on the host filesystem as root...

CVE-2022-25197

Jenkins HashiCorp Vault Plugin 336.v182c0fbaaeb7 and earlier implements functionality that allows agent processes to read arbitrary files on the Jenkins controller file system...

CVE-2021-44977

In iCMS =8.0.0, a directory traversal vulnerability allows an attacker to read arbitrary files...

iCMS 路径遍历漏洞

iCMS is a software application. An efficient and simple content management system built with PHP and MySQL. A path traversal vulnerability exists in iCMS, which originates in iCMS and can be exploited by an attacker to read arbitrary files...

CVE-2022-23409

The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php...

TransmitMail 跨站脚本漏洞

TransmitMail is a Php-based mail form system from the Japanese individual developer Tagawa Takao. TransmitMail suffers from a cross-site scripting vulnerability that originates from a software input validation error when processing a directory traversal sequence. A remote attacker could use this...

PT-2022-15862

Name of the Vulnerable Software and Affected Versions Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux versions 20 and below Description A directory traversal issue could allow an attacker to read arbitrary files from the file system. The attacker must first obtain...

CVE-2021-28376

ChronoForms 7.0.7 allows fname Directory Traversal to read arbitrary files...

VulnCheck KEV: CVE-2010-4598

Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in an open request...

CVE-2021-28377: Improper Limitation of a Pathname to a Restricted Directory

ChronoForums 2.0.11 allows av Directory Traversal to read arbitrary files...

VulnCheck KEV: CVE-2011-2474

Directory traversal vulnerability in the HTTP Server in Sybase EAServer 6.3.1 Developer Edition allows remote attackers to read arbitrary files via a /.../../\ sequence in a path...

CVE-2022-22264

Improper sanitization of incoming intent in Dressroom prior to SMR Jan-2022 Release 1 allows local attackers to read and write arbitrary files without permission...

PT-2022-11108

Name of the Vulnerable Software and Affected Versions Phone Manager application affected versions not specified Description The issue is related to Improper Privilege Management, which can be exploited to read and write arbitrary files by tampering with Phone Manager notifications. Recommendation...

CVE-2021-43043

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The apache user could read arbitrary files such as /etc/shadow by abusing an insecure Sudo rule...

PT-2021-23732 · Kaseya +1 · Kaseya Unitrends Backup Appliance +1

Name of the Vulnerable Software and Affected Versions: Kaseya Unitrends Backup Appliance versions prior to 10.5.5 Description: An issue was discovered in the software where the apache user could read arbitrary files, such as /etc/shadow, by abusing an insecure Sudo rule. Recommendations: For...

PT-2021-21966

Name of the Vulnerable Software and Affected Versions: Wipro Holmes Orchestrator version 20.4.1 Description: The issue allows remote attackers to read arbitrary files due to absolute path traversal in the SearchString JSON field. This is exploited through the "/home/download" API endpoint in POST...