Synology DiskStation Manager 注入漏洞

DiskStation Manager DSM is an operating system that runs on all Synology NAS and can be operated through an intuitive web interface. A security vulnerability exists in the File Sharing Management component of Synology DiskStation Manager prior to version 6.2.3-25426-3. A remote attacker can explo...

AGG Software Web Server 路径遍历漏洞

Web Server is a simple but fast and robust web server from AGG Software. A security vulnerability exists in AGG Software Web Server that stems from the vulnerability of the affected product to a path traversal attack, where an attacker may be able to read arbitrary files from the file system...

PT-2021-14012

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server Network Deployment versions 8.5 through 9.0 Description: The issue allows a remote authenticated attacker to traverse directories by sending a specially-crafted URL request containing dot dot sequences /../ to...

CVE-2021-20517: Improper Limitation of a Pathname to a Restricted Directory

IBM WebSphere Application Server Network Deployment 8.5 and 9.0 could allow a remote authenticated attacker to traverse directories. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to read and delete arbitrary files on the system. IBM X-Force ID: 198435...

CVE-2020-6950

Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter...

CVE-2021-33184

Server-Side request forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2021-33183: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability container volume management component in Synology Docker before 18.09.0-0515 allows local users to read or write arbitrary files via unspecified vectors...

PT-2021-20068

Name of the Vulnerable Software and Affected Versions Synology Download Station versions prior to 3.8.15-3563 Description A Server-Side request forgery SSRF issue exists in the task management component, allowing remote authenticated users to read arbitrary files. Recommendations For versions pri...

CVE-2021-33184: Server-Side Request Forgery (SSRF)

Server-Side request forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote authenticated users to read arbitrary files via unspecified vectors...

Ubuntu Apport 后置链接漏洞

Apport is a toolkit for collecting and giving feedback on error messages information that the operating system finds useful when an application crashes. A security vulnerability exists in Ubuntu Apport that stems from Apport incorrectly handling certain information-gathering operations, which can...

Ubuntu Apport 后置链接漏洞

Canonical Ubuntu is a GNU/Linux operating system from the British company Canonical that focuses on desktop applications. A security vulnerability exists in Ubuntu Apport that stems from the incorrect handling of certain information gathering operations, which can be exploited by an attacker who...

USN-4965-1 apport vulnerabilities

Maik Münch discovered that Apport incorrectly handled certain information gathering operations. A local attacker could use these issues to read and write arbitrary files as an administrator, and possibly escalate privileges...

Adobe Magento 路径遍历漏洞

Adobe Magento is the United States of America Odobie Adobe company's set of open source PHP e-commerce system . The system provides rights management, search engine and payment gateway features. A path traversal vulnerability exists in Adobe Magento. The vulnerability exists due to an input...

CVE-2021-1438

A vulnerability in Cisco Wide Area Application Services WAAS Software could allow an authenticated, local attacker to gain access to sensitive information on an affected device. The vulnerability is due to improper input validation and authorization of specific commands that a user can execute...

CVE-2021-29101

ArcGIS GeoEvent Server versions 10.8.1 and below has a read-only directory path traversal vulnerability that could allow an unauthenticated, remote attacker to perform directory traversal attacks and read arbitrary files on the system...

CVE-2021-30048

Directory Traversal in the fileDownload function in com/java2nb/common/controller/FileController.java in Novel-plus ?????-plus 3.5.1 allows attackers to read arbitrary files via the filePath parameter...

CVE-2021-25361

An improper access control vulnerability in stickerCenter prior to SMR APR-2021 Release 1 allows local attackers to read or write arbitrary files of system process via untrusted applications...

CVE-2020-24137

Directory traversal vulnerability in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the path parameter to wex/cssjs.php...

PT-2021-11008

Name of the Vulnerable Software and Affected Versions: Wcms version 0.3.2 Description: A directory traversal issue allows an attacker to read arbitrary files on the server via the path parameter to "wex/cssjs.php". Recommendations: For Wcms version 0.3.2, avoid using the path parameter in the...

WCMS 路径遍历漏洞

WCMS is a content management system CMS that uses an open web interface to build websites. A directory traversal vulnerability exists in WCMS version 0.3.2. The vulnerability can be exploited to read arbitrary files on the server running the application via the path parameter of wex/cssjs.php...