1531 matches found
PT-2018-8944
Name of the Vulnerable Software and Affected Versions Ultimate Member plugin versions prior to 2.0.4 Description The issue allows remote authenticated attackers to read arbitrary files due to a directory traversal vulnerability in the shortcodes function. Recommendations For versions prior to...
CVE-2018-0586: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the shortcodes function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to read arbitrary files via unspecified vectors...
PT-2018-4345
Name of the Vulnerable Software and Affected Versions IceWarp Mail Server versions prior to 11.2 Description The issue allows remote attackers to read arbitrary files. This can be achieved by exploiting directory traversal vulnerabilities, specifically by using a '..' dot dot in the file paramete...
Cockpit Cross-Site Request Forgery Vulnerability
Cockpit is an open source CMS Content Management System for managing structured content. A server-side request forgery vulnerability exists in the /assets/lib/fuc.js.php file in Cockpit versions 0.4.4 through 0.5.5. A remote attacker can exploit this vulnerability to read arbitrary files or send...
CVE-2018-9302
SSRF Server Side Request Forgery in /assets/lib/fuc.js.php in Cockpit 0.4.4 through 0.5.5 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts via the url parameter. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-14611, which was about...
CVE-2018-10077
XML external entity XXE vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data...
PT-2018-9732
Name of the Vulnerable Software and Affected Versions: Digital Guardian Management Console version 7.1.2.0015 Description: The issue allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. This can occur even if the logged-in...
CVE-2014-2069
Absolute path traversal vulnerability in Eshtery CMS allows remote attackers to read arbitrary files via a full pathname in the file parameter to FileManager.aspx...
PT-2018-9694
Name of the Vulnerable Software and Affected Versions: QingDao Nature Easy Soft Chanzhi Enterprise Portal System aka chanzhieps version pro1.6 Description: The issue allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to "www/file.php" API...
CVE-2017-14611: Server-Side Request Forgery (SSRF)
SSRF Server Side Request Forgery in Cockpit 0.13.0 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts via the url parameter, related to use of the discontinued aheinze/fetchurlcontents component...
CVE-2018-1000148
An exposure of sensitive information vulnerability exists in Jenkins Copy To Slave Plugin version 1.4.4 and older in CopyToSlaveBuildWrapper.java that allows attackers with permission to configure jobs to read arbitrary files from the Jenkins master file system...
PT-2018-9320
Name of the Vulnerable Software and Affected Versions Jenkins Copy To Slave Plugin versions 1.4.4 and older Description A sensitive information exposure issue exists, allowing attackers with job configuration permissions to read arbitrary files from the Jenkins master file system. This is due to ...
WebProxy Path Traversal Vulnerability
WebProxy is a suite of software for creating proxy servers. A path traversal vulnerability exists in WebProxy version 1.7.8. An attacker can exploit this vulnerability to read arbitrary files...
CVE-2018-9010
Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page parameter, aka absolute path traversal. In some cases, authentication can be achieved via the admin account with its default admin password...
CVE-2018-9010: Improper Limitation of a Pathname to a Restricted Directory
Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page parameter, aka absolute path traversal. In some cases, authentication can be achieved via the admin account with its default admin password...
PT-2018-18779
Name of the Vulnerable Software and Affected Versions Intelbras TELEFONE IP TIP200/200 LITE version 60.0.75.29 Description The issue allows remote authenticated admins to read arbitrary files via the "/cgi-bin/cgiServer.exx" page parameter, which is vulnerable to absolute path traversal. In some...
PT-2018-8900
Name of the Vulnerable Software and Affected Versions WebProxy version 1.7.8 Description A directory traversal issue allows an attacker to read arbitrary files via unspecified vectors. Recommendations For WebProxy version 1.7.8, at the moment, there is no information about a newer version that...
PT-2018-4205
Name of the Vulnerable Software and Affected Versions Ajax Pagination twitter Style plugin version 1.1 for WordPress Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability. This is achieved by using a .. dot dot in the loop parameter in an...