CVE-2021-35975

Absolute path traversal vulnerability in the Systematica SMTP Adapter component up to v2.0.1.101 in Systematica Radius up to v.3.9.256.777 allows remote attackers to read arbitrary files via a full pathname in GET parameter "file" in URL. Also: affected components in same product - HTTP Adapter u...

CVE-2023-6252

Path traversal vulnerability in Chalemelon Power framework, affecting the getImage parameter. This vulnerability could allow a remote user to read files located on the server and gain access to sensitive information such as configuration files...

Path traversal

Path traversal vulnerability in Chalemelon Power framework, affecting the getImage parameter. This vulnerability could allow a remote user to read files located on the server and gain access to sensitive information such as configuration files...

OpenHarmony 安全漏洞

OpenHarmony is a kind of hongmeng operating system open source project. A security vulnerability exists in OpenHarmony prior to version v3.2.2, which can be exploited by an attacker to read and write arbitrary files via improper privilege saving...

ModelDB Security Vulnerabilities

ModelDB is an open source system for machine learning model version control, metadata, and experiment management from VertaAI. ModelDB has a security vulnerability that stems from a remote file inclusion LFI vulnerability in the artifactpath URL parameter. An attacker can exploit this vulnerabili...

Fortinet FortiWAN 路径遍历漏洞

Fortinet FortiWAN is a network appliance from Fortinet, Inc. It is used to perform load balancing and fault tolerance between different networks. A path traversal vulnerability exists in Fortinet FortiWAN, which stems from improperly restricting pathnames to restricted directories, and can be...

VulnCheck KEV: CVE-2021-3223

Node-RED-Dashboard before 2.26.2 allows uibase/js/..%2f directory traversal to read files...

CVE-2023-41356

NCSIST ManageEngine Mobile Device ManagerMDM APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files...

PT-2023-26877 · Synology · Music Station

Name of the Vulnerable Software and Affected Versions: Music Station versions prior to 4.8.11 Music Station versions prior to 5.1.16 Music Station versions prior to 5.3.23 Description: A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could...

PT-2023-27924 · Zoho · Manageengine Mobile Device Manager

Name of the Vulnerable Software and Affected Versions: ManageEngine Mobile Device ManagerMDM APP affected versions not specified Description: The issue is related to a path traversal vulnerability in a special function of the ManageEngine Mobile Device ManagerMDM APP. This vulnerability can be...

PT-2023-27917 · Zoho · Manageengine Mobile Device Manager

Name of the Vulnerable Software and Affected Versions: NCSIST ManageEngine Mobile Device ManagerMDM APP affected versions not specified Description: The issue is related to a path traversal vulnerability in a special function of the NCSIST ManageEngine Mobile Device ManagerMDM APP. This...

AgeVolt Portal Path Traversal Vulnerability

AgeVolt Portal is the web portal of AgeVolt, Inc. A security vulnerability exists in AgeVolt Portal versions prior to 0.1. An attacker could exploit this vulnerability to read files with web server privileges from anywhere on the target operating system...

WordPress plugin AI ChatBot path traversal vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2023-45277

Yamcs 5.8.6 is vulnerable to directory traversal issue 1 of 2. The vulnerability is in the storage functionality of the API and allows one to escape the base directory of the buckets, freely navigate system directories, and read arbitrary files...

PT-2023-29765 · Wipotec Gmbh · Comscale

Name of the Vulnerable Software and Affected Versions: WIPOTEC GmbH ComScale versions 4.3.29.21344 through 4.4.12.723 Description: The issue allows unauthenticated attackers to read files from the underlying operating system and obtain directory listings due to a failure in validating user...

Ivanti Endpoint Manager Code Issue Vulnerability

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti USA. A security vulnerability exists in Ivanti Endpoint Manager 2022 SU3 and prior versions, which stems from a vulnerability that allows an attacker to read and disclose files on the server and perform elevation of...

The vulnerability of the FileMgmtExport class in the Advanced Core Operating System (ACOS) controller A10 Thunder ADC allows a hacker to read and delete any files they desire.

The vulnerability of the FileMgmtExport class in the Advanced Core Operating System ACOS controller A10 Thunder ADC lies in an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability allows a malicious actor to read and delete any files at will from...

Improper Input Validation

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Improper Input Validation due to improper handling of input validation. An attacker can read arbitrary files from the file system by exploiting the privileges of an...

Server-side Request Forgery (SSRF)

Overview magento/project-community-edition is an eCommerce Platform for Growth Community Edition Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the injection of arbitrary URLs. An attacker can read files outside the application's path boundary by forcing...

Adobe Commerce Input Validation Error Vulnerability

Adobe Commerce is a leading global digital commerce solution for merchants and brands from Adobe. An input validation error vulnerability exists in Adobe Commerce prior to version 2.4.7, which stems from being affected by an incorrect input validation vulnerability that could allow an attacker...