PT-2024-14828

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A local attacker with low privileges can read and modify any user's files and cause a Denial of Service DoS in the working directory of the affected...

JetBrains TeamCity < 2022.04.7 / 2022.05.x < 2022.10.6 / 2023.x < 2023.05.6 / 2023.06.x < 2023.11.5 / 2024.x < 2024.03.2 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2022.04.7, or prior to 2022.10.6, or prior to 2023.05.6, or prior to 2023.11.5, or prior to 2024.03.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6,...

CVE-2024-36362

CVE-2024-36362 describes a path traversal in JetBrains TeamCity servers that allows reading arbitrary files from the server. Affected versions are TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, and 2024.03.2. Remediation is to upgrade to the corresponding fixed releases: 2022.04.7 or...

CVE-2024-35219: Improper Limitation of a Pathname to a Restricted Directory

OpenAPI Generator allows generation of API client libraries SDK generation, server stubs, documentation and configuration automatically given an OpenAPI Spec. Prior to version 7.6.0, attackers can exploit a path traversal vulnerability to read and delete files and folders from an arbitrary,...

PT-2024-35096 · Opentext · Opentext Dimensions Rm

Name of the Vulnerable Software and Affected Versions: OpenText Dimensions RM affected versions not specified Description: The issue allows authenticated users to read files stored on the server via webservices, potentially leading to unauthorized access to sensitive information. Recommendations:...

CVE-2023-41290

A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version:...

CVE-2023-41291: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version:...

PT-2024-11539 · Mautic · Mautic

Name of the Vulnerable Software and Affected Versions: Mautic versions prior to 4.4.12 Mautic versions prior to 5.0.4 Description: An authenticated user of Mautic could read system files and access the internal addresses of the application due to a Server-Side Request Forgery SSRF vulnerability...

CVE-2024-1974

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4.6 via the render function. This makes it possible for authenticated attackers, with contributor access or higher, to read the contents of arbitrary files...

PT-2024-24617

Name of the Vulnerable Software and Affected Versions Pebble versions prior to 1.10.2 Pebble versions 1.1.1, 1.4.2, and 1.7.4 are fixed versions, but all versions prior to 1.10.2 are considered vulnerable. Description The issue allows unprivileged local users to read files with root-equivalent...

CVE-2023-25341

A Directory Traversal vulnerability in ladle dev server 2.5.1 and earlier allows an attacker on the same network to read files accessible to the user via GET requests...

The vulnerability of the ColdFusion software platform, related to deficiencies in access control, allows attackers to gain access to confidential information.

The vulnerability of the ColdFusion software platform is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential information—specifically, to read and write files...

Apache Pulsar 安全漏洞

Apache Pulsar is the United States Apache Apache Foundation for cloud environments, set of messages, storage, lightweight functional computing as one of the distributed message flow platform. The software supports multi-tenant, persistent storage, multi-machine room cross-region data replication,...

PT-2024-2611 · Apache · Apache Pulsar

Name of the Vulnerable Software and Affected Versions: Apache Pulsar versions prior to 2.10.6 Apache Pulsar versions prior to 2.11.4 Apache Pulsar versions prior to 3.0.3 Apache Pulsar versions prior to 3.1.3 Apache Pulsar versions prior to 3.2.1 Description: The issue is related to the Pulsar...

CVE-2023-47221

A path traversal vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version:...

AiLux imx6 Security Vulnerability

AiLux imx6 is a computing module from AiLux. AiLux imx6 A security vulnerability exists in versions prior to imx6 imx61.0.7-2, which stems from a failure of a protection mechanism that allows a physical attacker to read arbitrary files on the system, change the configuration of the embedded...

CVE-2023-41829

An improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious, local application to read files without authorization...

Input validation

An improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious, local application to read files without authorization...

Motorola Carrier Security Breach

Motorola Carrier is a suite of solutions and services from Motorola, Inc. designed to help operators build and manage their mobile communications networks. A security vulnerability exists in Motorola Carrier that stems from the presence of an incorrect export vulnerability that could allow a...

HGiga OAKlouds Path Traversal Vulnerability

Hgiga Oaklouds is an enterprise collaborative work portal network of China Henderson Technology Hgiga Company. It is used for just-in-time communication and resource reservation. A path traversal vulnerability exists in HGiga OAKlouds. An attacker can exploit this vulnerability to read and delete...