CVE-2017-15363

Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension before 1.7.1 for TYPO3, allows remote attackers to read arbitrary files via the file parameter...

Ubuntu 14.04 LTS : OpenStack Nova vulnerabilities (USN-3449-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3449-1 advisory. George Shuklin discovered that OpenStack Nova incorrectly handled the migration process. A remote authenticated user could use this issue to consume...

PT-2017-6732

Name of the Vulnerable Software and Affected Versions Helpdesk Pro plugin versions prior to 1.4.0 Description The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability. This is achieved by using a .. dot dot in the filename parameter within a...

CVE-2017-11162: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in synphotoio in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote authenticated users to read arbitrary files via unspecified vectors...

phpMyBackupPro path traversal vulnerability (CNVD-2017-30647)

phpMyBackupPro is a free web-based MySql backup tool. The tool supports automatic backup, timed backup, off-site backup MySql database. A directory traversal vulnerability exists in the getfile.php file in phpMyBackupPro versions 2.1 through 2.5. A remote attacker can read arbitrary files with th...

CVE-2017-10834: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in "Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows authenticated attackers to read arbitrary files via unspecified vectors...

CVE-2017-10841

Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers to read arbitrary files via unspecified vectors...

PT-2017-11542

Name of the Vulnerable Software and Affected Versions Dokodemo eye Smart HD SCR02HD Firmware versions 1.0.3.1000 and earlier Description The issue allows authenticated attackers to read arbitrary files via unspecified vectors. This is a directory traversal vulnerability. Recommendations For...

CVE-2015-4181: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in getfile.php in phpMyBackupPro 2.1 through 2.5 allows remote attackers to read arbitrary files via a .. dot dot in the view parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this...

PT-2017-4815

Name of the Vulnerable Software and Affected Versions: Apache Wink versions 1.1.1 and earlier Description: The issue allows remote attackers to read arbitrary files or cause a denial of service via a crafted XML document. Recommendations: For Apache Wink versions 1.1.1 and earlier, consider...

CVE-2017-9495

The Comcast firmware on Motorola MX011ANM firmware version MX011AN2.9p6s1PRODsey devices allows physically proximate attackers to read arbitrary files by pressing "EXIT, Down, Down, 2" on an RF4CE remote to reach the diagnostic display, and then launching a Remote Web Inspector script...

CVE-2017-9480

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows local users e.g., users who have command access as a consequence of CVE-2017-9479 exploitation to read arbitrary files via UPnP access to /var/IGD/...

CVE-2017-9480: Exposure of Sensitive Information to an Unauthorized Actor

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows local users e.g., users who have command access as a consequence of CVE-2017-9479 exploitation to read arbitrary files via UPnP access to /var/IGD/...

PT-2017-18952

Name of the Vulnerable Software and Affected Versions Cisco DPC3939 version dpc3939-P20-18-v303r20421746-170221a-CMCST Description The issue allows local users with command access to read arbitrary files via UPnP access to the /var/IGD/ directory. This can be exploited by users who have gained...

PT-2017-18965

Name of the Vulnerable Software and Affected Versions Comcast firmware on Motorola MX011ANM version MX011AN 2.9p6s1 PROD sey Description The issue allows physically proximate attackers to read arbitrary files on the device. This can be achieved by pressing a specific sequence of buttons on an RF4...

CVE-2015-4462: Unrestricted Upload of File with Dangerous Type

Absolute path traversal vulnerability in the filemanager component of eFront CMS before 3.6.15.5 allows remote authenticated users to read arbitrary files via a full pathname in the "Upload file from url" field in the file manager for professor.php...

PT-2017-7896

Name of the Vulnerable Software and Affected Versions ATutor versions prior to 2.2.2 Description A Directory Traversal issue exists, allowing an attacker to read arbitrary files. This can be achieved by exploiting the icon parameter in the /mods/ core/courses/users/create course.php endpoint, and...

CVE-2017-9812

The reportId parameter of the getReportStatus action method can be abused in the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 version 8.0.4.312 to read arbitrary files with kluser privileges...

PT-2017-15288

Name of the Vulnerable Software and Affected Versions AssetView for MacOS versions 9.2.0 and earlier Description A directory traversal issue in the "File Transfer Web Service" of AssetView for MacOS allows remote attackers to read arbitrary files. Recommendations For versions 9.2.0 and earlier,...

CVE-2015-3297

Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.1 through 1.5.2 allows remote attackers to read arbitrary files by leveraging replacement of backslashes with slashes in the path parameter of HTTP API requests...