1531 matches found
rubygem-sprockets: Path traversal in forbidden_request?() can allow remote attackers to read arbitrary files
There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12.4 and lower. Specially crafted requests can be used to access files that exists on the filesystem that is outside an application's root directory, when the Sprockets server is...
Smarty path traversal vulnerability
New Digital Group Smarty is a template engine written in PHP by New Digital Group. A path traversal vulnerability exists in the 'SmartySecurity::isTrustedResourceDir' function in New Digital Group Smarty versions prior to 3.1.33, which stems from the program's failure to adequately filter templat...
CVE-2016-7041
Drools Workbench contains a path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to bypass the directory restrictions and retrieve arbitrary files from the affected host...
PT-2018-4969 · Red Hat · Drools Workbench
Name of the Vulnerable Software and Affected Versions: Drools Workbench affected versions not specified Description: The issue allows a remote, authenticated attacker to bypass directory restrictions and retrieve arbitrary files from the affected host due to a path traversal vulnerability...
OpenEMR Directory Traversal Vulnerability (CNVD-2019-10150)
OpenEMR is a medical practice management software that also supports electronic medical records EMR. A directory traversal vulnerability exists in portal/importtemplate.php in OpenEMR versions prior to 5.0.1.4, which can be exploited by a remote attacker to read arbitrary files via the "docid"...
CVE-2018-15140
Directory traversal in portal/importtemplate.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to read arbitrary files via the "docid" parameter when the mode is set to get...
PT-2018-8973
Name of the Vulnerable Software and Affected Versions ChamaNet MemoCGI versions 2.1800 through 2.2200 Description A directory traversal issue allows remote attackers to read arbitrary files. Recommendations For versions 2.1800 through 2.2200, update to a version outside of this range to resolve t...
Dialogic PowerMedia XMS Information Disclosure Vulnerability
Dialogic PowerMedia XMS is a highly scalable, software-only media server that supports standards-based, real-time multimedia communication solutions for mobile and broadband environments. An information disclosure vulnerability exists in the management console of Dialogic PowerMedia XMS 3.5 and...
CVE-2017-0913
Ubiquiti UCRM versions 2.3.0 to 2.7.7 allow an authenticated user to read arbitrary files in the local file system. Note that by default, the local file system is isolated in a docker container. Successful exploitation requires valid credentials to an account with "Edit" access to "System...
PT-2018-10721
Name of the Vulnerable Software and Affected Versions Dialogic PowerMedia XMS versions prior to 3.5 Description The issue allows remote attackers to read arbitrary files from the /var/ directory due to a symlink existing under the web root in the administrative console. Recommendations For versio...
PT-2018-5140
Name of the Vulnerable Software and Affected Versions Ubiquiti UCRM versions 2.3.0 through 2.7.7 Description The issue allows an authenticated user to read arbitrary files in the local file system. By default, the local file system is isolated in a docker container. Successful exploitation requir...
Redatam7 Path Traversal Vulnerability
Redatam 7 formerly known as Redatam WebServer is a computerized data processing system. The system is primarily used for processing and analyzing census, administrative records and national/regional data, among others. A directory traversal vulnerability exists in Redatam7. A remote attacker can...
Schools Alert Management Script Absolute Path Traversal Vulnerability
Schools Alert Management Script is a set of school management system scripts. An absolute path traversal vulnerability exists in PHP Scripts Mall Schools Alert Management Script. The vulnerability can be exploited to read arbitrary files via the f parameter in img.php...
CVE-2018-3727
626 node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious user to read content of any file with known path...
CVE-2018-3730
mcstatic node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a malicious user to read content of any file with known path...
CVE-2018-3732
resolve-path node module before 1.4.0 suffers from a Path Traversal vulnerability due to lack of validation of paths with certain special characters, which allows a malicious user to read content of any file with known path...
PT-2018-16137 · Node.Js · Angular-Http-Server
Name of the Vulnerable Software and Affected Versions: angular-http-server versions prior to 1.6.0 Description: The angular-http-server node module has a Path Traversal issue due to the lack of validation of the possibleFilename variable, allowing a malicious user to read the content of any file...
PT-2018-9363
Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.121 Jenkins LTS versions prior to 2.107.3 Description A path traversal issue exists that allows malicious agents to read and write arbitrary files on the Jenkins master, bypassing security protections. This is due t...
CVE-2018-1438
IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.6.1, 7.7, 7.7.1, 7.8, 7.8.1, 8.1, and 8.1.1 web handler /DLSnap could allow an unauthenticated attacker to read arbitrary files on the system. IBM...