Multiple Vulnerabilities in HPE Service Manager

HPE Service Manager is a suite of service desk software. The software supports the deployment of a comprehensive IT service management system and standardizes management processes. Multiple vulnerabilities exist in HPE Service Manager, allowing remote attackers to exploit the vulnerabilities to...

CVE-2016-4791

The administrative user interface in Pulse Connect Secure PCS 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote administrators to enumerate files, read arbitrary files, and conduct server side request forgery SSRF attacks via unspecified vectors...

SAP xMII 15.0 - Directory Traversal

Application: SAP xMII Versions Affected: SAP MII 15.0 Vendor URL: http://SAP.com Bugs: Directory traversal Sent: 29.07.2015 Reported: 29.07.2015 Vendor response: 30.07.2015 Date of Public Advisory: 09.02.2016 Reference: SAP Security Note 2230978 Author: Dmitry Chastuhin ERPScan Description 1...

LebiShop Mall Backend Catalog Traversal Vulnerability

LebiShop mall system is an online mall system using ASP.NET language. The system is widely used in small and medium-sized e-commerce enterprises. The mall system's management background provides a system template management function , the function in the system template to browse files related to...

DEBIAN-CVE-2016-3717

The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image...

The vulnerability of the OpenSUSE Leap and OpenSUSE operating systems allows attackers to obtain confidential information.

The vulnerability of the OpenSUSE Leap operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating locally, to obtain confidential information by reading files in the directory...

The vulnerability of the Junos operating system, which allows a hacker to read, delete, or modify any files at will

The vulnerability of the Remote Procedure Call RPC function in the Junos operating system exists due to insufficient checking of resource status when resources are allowed to be shared among multiple processes. Exploiting this vulnerability could allow a malicious actor, operating locally, to rea...

CVE-2016-1267

Race condition in the RPC functionality in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D39, 13.3 before 13.3R7, 14.1 before 14.1R6, 14.1X53 before...

CVE-2016-1358

Cisco Prime Infrastructure 2.2, 3.0, and 3.10.0 allows remote authenticated users to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue, aka Bug ID...

Xceedium Xsuite Multiple Vulnerabilities

Xceedium Xsuite is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xceedium:xsuite";...

CVE-2016-0245

The XML parser in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF10 allows remote authenticated users to read arbitrary files or cause a denial of service via an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE...

The vulnerability of the Cisco Firepower Extensible Operating System allows a perpetrator to gain access to read the files.

The vulnerability of the Cisco Firepower Extensible Operating System is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to files through a specially crafted HTTP request...

The vulnerability of the MDS PulseNET system for monitoring and managing network traffic allows a hacker to read or delete any files they desire.

The vulnerability of the MDS PulseNET network monitoring and management system exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to read or delete arbitrary files using the full path to the directory...

UBUNTU-CVE-2015-8770

Directory traversal vulnerability in the setskin function in program/include/rcmailoutputhtml.php in Roundcube before 1.0.8 and 1.1.x before 1.1.4 allows remote authenticated users with certain permissions to read arbitrary files or possibly execute arbitrary code via a .. dot dot in the skin...

jenkins: XXE injection into job configurations via CLI (SECURITY-173)

XML external entity XXE vulnerability in the create-job CLI command in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to read arbitrary files via a crafted job configuration that is then used in an "XML-aware tool," as demonstrated by get-job and update-job...

OpenStack Compute(liberty) directory traversal vulnerability

OpenStack is a cloud platform management project.OpenStack Compute Nova is one of the cloud computing construct controllers written in the Python language and is part of the IaaS system. OpenStack Compute has a security vulnerability. When a program spawns an instance using libvirt and sets...

SAP Business Object Data Services - directory traversal

Application: SAP Data Services 4.2 Vendor URL: SAP Bug: Directory Travesal Reported: 01.02.2016 Vendor response: 02.02.2016 Date of Public Advisory: 14.06.2016 Reference: SAP Security Note 2300346 Author: Nursultan Abubakirov ERPScan VULNERABILITY INFORMATION Class: directory traversal Impact:...

Spiffy Directory Traversal Vulnerability

Spiffy is a free and fully customizable Gmail notification software. A directory traversal vulnerability exists in Spiffy version 5.4. This allows a remote attacker to read arbitrary files or restricted directories containing sensitive information via directory traversal characters '... /' to rea...

Samsung Galaxy S6 Directory Traversal Vulnerability

The Samsung Galaxy S6 is a smartphone released by the South Korean company Samsung. The Samsung Galaxy S6 failed to adequately filter user-submitted input, allowing a remote attacker to send requests containing directory traversal characters to read arbitrary system files...

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server allows a intruder to read arbitrary files.

The vulnerability of the Microprogramming Software of the Cisco TelePresence Video Communication Server exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor, operating locally, to read arbitrary files...