The vulnerability of the Action View component of the Ruby on Rails software platform, allowing attackers to read arbitrary files

The vulnerability of the Action View component in the Ruby on Rails software framework is related to errors in handling HTTP headers “Accept” when used in the “render file” handler code. Exploiting this vulnerability allows an attacker to read arbitrary files...

PT-2019-9402

Name of the Vulnerable Software and Affected Versions PrinterOn versions 4.1.4 and lower Description A vulnerability exists that allows remote authenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks. This is achieved by sending a crafted DTD in an XML...

PT-2019-12269

Name of the Vulnerable Software and Affected Versions ProjectSend version r1053 Description An issue was discovered that allows directory traversal through the upload-process-form.php file, potentially enabling users to read arbitrary files, access the supporting database, delete arbitrary files,...

CVE-2019-5927: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in 'an' App for iOS Version 3.2.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2019-1588

A vulnerability in the Cisco Nexus 9000 Series Fabric Switches running in Application-Centric Infrastructure ACI mode could allow an authenticated, local attacker to read arbitrary files on an affected device. The vulnerability is due to a lack of proper input and validation checking mechanisms o...

PT-2019-1549

Name of the Vulnerable Software and Affected Versions Cisco Nexus 9000 Series Fabric Switches versions prior to 14.01h Description The issue is related to a lack of proper input and validation checking mechanisms of user-supplied input sent to an affected device. This could allow an authenticated...

CVE-2019-1588: Improper Input Validation

A vulnerability in the Cisco Nexus 9000 Series Fabric Switches running in Application-Centric Infrastructure ACI mode could allow an authenticated, local attacker to read arbitrary files on an affected device. The vulnerability is due to a lack of proper input and validation checking mechanisms o...

PT-2019-19019

Name of the Vulnerable Software and Affected Versions FeiFeiCms version 4.0.181010 Description The issue allows remote attackers to read or delete arbitrary files due to a directory traversal vulnerability. This can be exploited via specific API endpoints, such as...

PT-2019-17852

Name of the Vulnerable Software and Affected Versions HOUSE GATE App for iOS versions 1.7.8 and earlier Description A directory traversal issue allows remote attackers to read arbitrary files via unspecified vectors. Recommendations For HOUSE GATE App for iOS versions 1.7.8 and earlier, at the...

CVE-2019-6447: Missing Authentication for Critical Function

The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network. This TCP port remains open after the ES application has been launched once, and responds to...

PT-2019-9235

Name of the Vulnerable Software and Affected Versions Cybozu Remote Service versions 3.0.0 through 3.1.8 Description A directory traversal issue allows remote authenticated attackers to read arbitrary files. Recommendations For versions 3.0.0 through 3.1.8, update to a version that contains a fix...

Microsoft Word Information Disclosure Vulnerability

Microsoft Office is an office software suite of products developed by the United States Microsoft Microsoft.Word is a word processing software in the Office suite. An information disclosure vulnerability exists in Microsoft Word, which can be exploited by an attacker to read arbitrary files from...

CVE-2018-20571

DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add/id request, as demonstrated by admin.php?s=Tpl/Add/id/.\Public\Config\config.ini.php to read the global configuration file...

Arbitrary File Read Vulnerability in AWS RDS Service

Amazon RDS Service is an RDS service from Amazon that enables you to easily set up, operate, and scale relational databases in the cloud. An arbitrary file read vulnerability exists in AWS RDS Service, which can be exploited by an attacker to read arbitrary files...

CVE-2018-0673

Directory traversal vulnerability in Cybozu Garoon 3.5.0 to 4.6.3 allows authenticated attackers to read arbitrary files via unspecified vectors...

DEBIAN-CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

CVE-2018-18778

ACME minihttpd before 1.30 lets remote users read arbitrary files...

CVE-2018-7431

Directory traversal vulnerability in the Splunk Django App in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.6, and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allows remote authenticated users to read arbitrary files v...

Directory Traversal Vulnerability in ZTE C520 Smart Camera

The ZTE C520 is a smart Wi-Fi watchdog camera. A directory traversal vulnerability exists in the ZTE C520 smart camera. An attacker can exploit the vulnerability to read arbitrary files...

D-Link router httpd server directory traversal vulnerability

The DWR-116, DIR-140, and DIR-640 are all D-Link router products. A directory traversal vulnerability exists in the httpd server of several series of D-Link routers, which allows a remote attacker to read arbitrary files via an HTTP request after "GET / uir" followed by / ... or //. or // after...