1421 matches found
CVE-2016-10710
Biscom Secure File Transfer SFT 5.0.1000 through 5.0.1048 does not validate the dataFieldId value, and uses sequential numbers, which allows remote authenticated users to overwrite or read files via crafted requests. Version 5.0.1050 contains the fix...
Mozilla Firefox Access Privilege Bypass Vulnerability
Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in previous versions of Mozilla Firefox 58. An attacker can exploit this vulnerability by performing a symbolic link attack to bypass access privilege protection...
Cisco AnyConnect Profile Editor XML External Entity Injection Vulnerability
Cisco AnyConnect Secure Mobility Client is a secure mobility client from Cisco that provides secure access to networks and applications from any device. the Profile Editor is one of the Profile Document Editors. An XML external entity injection vulnerability exists in the Profile Editor in the...
CVE-2017-17662
Directory traversal in the HTTP server on Yawcam 0.2.6 through 0.6.0 devices allows attackers to read arbitrary files through a sequence of the form '.x./' or '....\x/' where x is a pattern composed of one or more zero or more for the second pattern of either \ or ..\ -- for example a '../',...
CVE-2017-7158
An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Screen Sharing Server" component. It allows attackers to obtain root privileges for reading files by leveraging screen-sharing access...
CVE-2017-10861
Directory traversal vulnerability in QND Advance/Standard allows an attacker to read arbitrary files via a specially crafted command...
The vulnerability in the server component of the SAP POS software for accounting automation, trading, and production allows a perpetrator to read, modify, and delete files.
The vulnerability in the server component of the SAP Point of Sale software for accounting, sales, and production automation involves a lack of authentication procedures. Exploiting this vulnerability allows a malicious actor to read, modify, and delete files using port 2200...
QualitySoft QND Directory Traversal Vulnerability
QualitySoft QND is a suite of IT asset management solutions from QualitySoft Japan. The solution features external media control, device operation log viewing and URL filtering. A directory traversal vulnerability exists in QualitySoft QND Advance/Standard. An attacker can exploit this...
MacOS 10.13 root Authentication Bypass (Security Update 2017-001)
The remote host is running a version of MacOS 10.13 or 10.13.1 that is missing a security update. It is, therefore, affected by a root authentication bypass vulnerability. A local attacker or a remote attacker with credentials for a standard user account has the ability to blank out the root...
CVE-2017-16661
Cacti 1.1.27 allows remote authenticated administrators to read arbitrary files by placing the Log Path into a private directory, and then making a clog.php?filename= request, as demonstrated by filename=passwd with a Log Path under /etc to read /etc/passwd...
GNU Emacs Information Disclosure Vulnerability
GNU Emacs is a Unix text editor written in C developed by the GNU Project, which supports syntax highlighting, multiple languages and feature extensions. A security vulnerability exists in GNU Emacs version 25.3.1, which stems from the program's failure to use a mask when creating swap files. An...
CVE-2017-14327
Extreme EXOS 16.x, 21.x, and 22.x allows administrators to read arbitrary files...
Axis SSI - Remote Command Execution Read Files
Axis SSI - Remote Command Execution Read Files STX Subject: SSI Remote Execute and Read Files Researcher: bashis August 2016 Release date: October, 2017 Old stuff that I've forgotten, fixed Q3/2016 by Axis Attack Vector: Remote Authentication: Anonymous no credentials needed Conditions: The cam...
Axis SSI - Remote Command Execution / Read Files
STX Subject: SSI Remote Execute and Read Files Researcher: bashis August 2016 Release date: October, 2017 Old stuff that I've forgotten, fixed Q3/2016 by Axis Attack Vector: Remote Authentication: Anonymous no credentials needed Conditions: The cam must be configure to allow anonymous view Execut...
CVE-2017-14526
Multiple XML external entity XXE vulnerabilities in the OpenText Documentum Administrator 7.2.0180.0055 allow remote authenticated users to list the contents of arbitrary directories, read arbitrary files, cause a denial of service, or, on Windows, obtain Documentum user hashes via a 1 crafted DT...
CVE-2017-14527
Multiple XML external entity XXE vulnerabilities in the OpenText Documentum Webtop 6.8.0160.0073 allow remote authenticated users to list the contents of arbitrary directories, read arbitrary files, cause a denial of service, or, on Windows, obtain Documentum user hashes via a 1 crafted DTD,...
Arbitrary File Read Vulnerability in KodExplorer
KodExplorer Kodo Cloud formerly Mango Cloud is a private cloud and online file management system based on Web technology developed by Shanghai Daimu Networks Co., Ltd. and is committed to providing users with secure and controllable, reliable and easy-to-use, highly scalable private cloud...
CVE-2017-10834
Directory traversal vulnerability in "Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows authenticated attackers to read arbitrary files via unspecified vectors...
