CVE-2021-40500

SAP BusinessObjects Business Intelligence Platform Crystal Reports - versions 420, 430, allows an unauthenticated attacker to exploit missing XML validations at endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation can enable the...

PT-2021-22907

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence Platform Crystal Reports versions 420, 430 Description The issue allows an unauthenticated attacker to exploit missing XML validations at endpoints to read sensitive data. These endpoints are normally...

The vulnerability of the Apache HTTP Server’s web server, related to defects in pathname restriction, allows attackers to execute arbitrary code or read arbitrary files on the target system.

The vulnerability of the Apache HTTP Server is related to deficiencies in pathname restriction. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or read arbitrary files on the target system...

VulnCheck KEV: CVE-2010-2861

A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files...

Apple macOS Big Sur安全漏洞

Apple macOS Big Sur is a mobile app from Apple. A security vulnerability exists in macOS Big Sur, which can be exploited by an attacker to allow a local user to read arbitrary files, perhaps as root...

USN-5077-1 apport vulnerabilities

Maik Münch and Stephen Röttger discovered that Apport incorrectly handled certain information gathering operations. A local attacker could use this issue to gain read access to arbitrary files, possibly containing sensitive information...

Apport 路径遍历漏洞

Apport is a toolkit for collecting and feeding back error messages information that the operating system considers useful when an application crashes. Apport suffers from a security vulnerability that originated when a local attacker could exploit this issue to gain read access to arbitrary files...

CVE-2021-39109

The renderWidgetResource resource in Atlasian Atlasboard before version 1.1.9 allows remote attackers to read arbitrary files via a path traversal vulnerability...

Aruba Operating System路径遍历漏洞

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks including mobile controllers and mobile access switches from Aruba Networks, Inc. The vulnerability is caused by a lack of validation and filtering of parameters, which could be exploited by an authenticated attacke...

WS-2021-0643

The module.php modname parameter in OpenSIS 8.0 is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server. This enables an attacker to access sensitive files...

CVE-2021-1583

A vulnerability in the fabric infrastructure file system access control of Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI mode could allow an authenticated, local attacker to read arbitrary files on an affected system. This vulnerability is due to improper acces...

CVE-2021-36014

Adobe Media Encoder version 15.2 and earlier is affected by an uninitialized pointer vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to read arbitrary file system information in the context of the current user. Exploitation of thi...

CVE-2021-34700

A vulnerability in the CLI interface of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read arbitrary files on the underlying file system of an affected system. This vulnerability exists because access to sensitive information on an affected system is not sufficient...

CVE-2021-34700

A vulnerability in the CLI interface of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read arbitrary files on the underlying file system of an affected system. This vulnerability exists because access to sensitive information on an affected system is not sufficient...

CVE-2021-21586

Wyse Management Suite versions 3.2 and earlier contain an absolute path traversal vulnerability. A remote authenticated malicious user could exploit this vulnerability in order to read arbitrary files on the system...

CVE-2021-21586

Wyse Management Suite versions 3.2 and earlier contain an absolute path traversal vulnerability. A remote authenticated malicious user could exploit this vulnerability in order to read arbitrary files on the system...

PT-2021-14630

Name of the Vulnerable Software and Affected Versions Wyse Management Suite versions 3.2 and earlier Description The issue allows a remote authenticated malicious user to exploit an absolute path traversal vulnerability, enabling them to read arbitrary files on the system. Recommendations For Wys...

Vulnerabilities fixed in Dell Wyse Management Suite

Dell has fixed vulnerabilities in Dell Wyse Management Suite. An authenticated remote malicious person could potentially potentially exploit them to perform a path traversal attack. This could gain read access to arbitrary files on the system. Dell has released updates to fix the vulnerabilities ...

CVE-2021-21586

Wyse Management Suite versions 3.2 and earlier contain an absolute path traversal vulnerability. A remote authenticated malicious user could exploit this vulnerability in order to read arbitrary files on the system...

CVE-2021-29085

Improper neutralization of special elements in output used by a downstream component 'Injection' vulnerability in file sharing management component in Synology DiskStation Manager DSM before 6.2.3-25426-3 allows remote attackers to read arbitrary files via unspecified vectors...