CVE-2017-18847

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400v2 before 1.0.2.32, R7000P/R6900P before 1.0.0.56, R7900 before 1.0.1.18, R8300 before 1.0.2.1001.0.82, R8500 before 1.0.2.1001.0.82, and D8500 before 1.0.3.29...

CVE-2017-18847: Exposure of Sensitive Information to an Unauthorized Actor

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400v2 before 1.0.2.32, R7000P/R6900P before 1.0.0.56, R7900 before 1.0.1.18, R8300 before 1.0.2.1001.0.82, R8500 before 1.0.2.1001.0.82, and D8500 before 1.0.3.29...

PT-2020-8394

Name of the Vulnerable Software and Affected Versions: NETGEAR R6400v2 versions 1.0.2.31 and earlier NETGEAR R7000P/R6900P versions 1.0.0.55 and earlier NETGEAR R7900 versions 1.0.1.17 and earlier NETGEAR R8300 versions 1.0.2.100 1.0.81 and earlier NETGEAR R8500 versions 1.0.2.100 1.0.81 and...

CVE-2020-3177

A vulnerability in the Tool for Auto-Registered Phones Support TAPS of Cisco Unified Communications Manager UCM and Cisco Unified Communications Manager Session Management Edition SME could allow an unauthenticated, remote attacker to conduct directory traversal attacks on an affected device. The...

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-31594)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have a security vulnerability that can be exploited by attackers to read arbitrary files or control email accounts...

CVE-2018-21071: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on Samsung mobile devices with M6.0 software. Because of an unprotected intent, an attacker can read arbitrary files and emails, and take over an email account. The Samsung ID is SVE-2018-11633 May 2018...

CVE-2020-3889

A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to read arbitrary files...

PT-2020-17777

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.4 Description A logic issue was addressed with improved state management, allowing a local user to potentially read arbitrary files. Recommendations For versions prior to 10.15.4, update to macOS Catalina 10.15.4 ...

Open Source Social Network Encryption Problem Vulnerability

Open Source Social Network OSSN is a source social network engine by the Swiss Ossn team. An encryption vulnerability exists in OSSN 5.3 and earlier versions. The vulnerability can be exploited to read arbitrary files by performing a brute force attack on a SiteKey to insert a specially crafted U...

CVE-2020-5554: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write arbitrary files via unspecified vectors...

CVE-2020-7478

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory exists in IGSS Versions 14 and prior using the service: IGSSupdate, which could allow a remote unauthenticated attacker to read arbitrary files from the IGSS server PC on an unrestricted or shared network when the IGSS Update...

CVE-2020-7478

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory exists in IGSS Versions 14 and prior using the service: IGSSupdate, which could allow a remote unauthenticated attacker to read arbitrary files from the IGSS server PC on an unrestricted or shared network when the IGSS Update...

CVE-2020-8793

OpenSMTPD before 6.6.4 allows local users to read arbitrary files e.g., on some Linux distributions because of a combination of an untrusted search path in makemap.c and race conditions in the offline functionality in smtpd.c...

CVE-2014-2052

Zend Framework, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly have other impact via an XML External Entity XXE attack...

Bosch DIVAR IP 3000 Path Traversal Vulnerability

Bosch DIVAR IP 3000 is a 3000 series video recorder from Bosch Germany. A path traversal vulnerability exists in Bosch DIVAR IP 3000. An unauthenticated, remote attacker could read arbitrary files from a centralized server...

PT-2020-19219

Name of the Vulnerable Software and Affected Versions Bosch BVMS versions 7.5 and older Bosch BVMS versions 8.0 through 8.0.329 Bosch BVMS versions 9.0 through 9.0.0.827 Bosch BVMS versions 10.0 through 10.0.0.1225 Bosch BVMS Viewer versions 7.5 and older Bosch BVMS Viewer versions 8.0 through...

CVE-2015-8549

XML external entity XXE vulnerability in PyAMF before 0.8.0 allows remote attackers to cause a denial of service or read arbitrary files via a crafted Action Message Format AMF payload...

PT-2020-7711

Name of the Vulnerable Software and Affected Versions Open-Xchange OX AppSuite versions prior to 7.4.2-rev11 Open-Xchange OX AppSuite versions 7.6.x prior to 7.6.0-rev9 Description The issue allows remote attackers to read arbitrary files and possibly have other unspecified impacts via a crafted...

CVE-2019-15983

A vulnerability in the SOAP API of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. To exploit this vulnerability, an attacker would need administrative privileges on the DCNM application...

PT-2020-10354

Name of the Vulnerable Software and Affected Versions Determine Contract Lifecycle Management CLM version 5.4 Description An issue was discovered that allows authenticated remote attackers to read arbitrary files, including configuration files containing administrative credentials, due to an XML...