1285 matches found
Apache Jena 代码问题漏洞
Apache Jena is a Java Semantic Web framework from the U.S. Apache Apache Foundation. It is used to build semantic Web and linked data applications. Apache Jena suffers from an XML external entity injection vulnerability, which stems from a Web system or product that does not set the correct filte...
PT-2022-3428 · Qnap · Quts Hero +2
Name of the Vulnerable Software and Affected Versions: QuTS hero versions prior to h4.5.4.1971 build 20220310 QuTS hero versions prior to h5.0.0.1986 build 20220324 QTS versions prior to 4.2.6 build 20220304 QTS versions prior to 4.3.3.1945 build 20220303 QTS versions prior to 4.3.4.1976 build...
SonicWall SSLVPN 路径遍历漏洞
SonicWALL SSLVPN is a transparent software application for Windows and Linux users from SonicWALL USA. It enables remote users to securely connect to the corporate network. A path traversal vulnerability exists in SonicWall SSLVPN, which allows an authenticated attacker to read arbitrary files...
Samsung Flow 路径遍历漏洞
Samsung flow is an application for Samsung Samsung mobile devices, a software used to connect Samsung to Win10 computers for a seamless, secure, and connected experience. path traversal vulnerability exists in versions prior to Samsung Flow 4.8.07.4, which stems from the lack of proper permission...
CVE-2021-41026
A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests...
Jenkins Continuous Integration with Toad Edge Plugin 路径遍历漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. An attacker with Item/Configure privileges can read arbitrary files on the...
The vulnerability of the Mozilla Firefox browser, related to access control deficiencies, allows attackers to gain access to confidential information.
The vulnerability of the Mozilla Firefox browser is related to access control deficiencies. Exploiting this vulnerability allows an attacker to read files from this folder and gain access to confidential information by reading files from the "/tmp" folder...
CVE-2022-25266
Passwork On-Premise Edition before 4.6.13 allows migration/downloadExportFile Directory Traversal to read files...
CVE-2022-25266
Passwork On-Premise Edition before 4.6.13 allows migration/downloadExportFile Directory Traversal to read files...
Directory traversal
Passwork On-Premise Edition before 4.6.13 allows migration/downloadExportFile Directory Traversal to read files...
CuppaCMS alertLightbox.php file contains vulnerabilities
CuppaCMS is a content management system CMS, and a file inclusion vulnerability exists in CuppaCMS version 1.0. The vulnerability stems from the fact that the url parameter in /alerts/alertLightbox.php does not effectively filter calls to local file resources, which could be exploited to read loc...
CVE-2022-27208
Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows users with Credentials/Create permission to read arbitrary files on the Jenkins controller...
CVE-2022-27203
Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier allows attackers with Item/Configure permission to read values from arbitrary JSON and Java properties files on the Jenkins controller...
CVE-2022-22835
An issue was discovered in OverIT Geocall before version 8.0. An authenticated user who has the Test Trasformazione XSL functionality enabled can exploit a XXE vulnerability to read arbitrary files from the filesystem...
IBM MQ Appliance 安全漏洞
IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from IBM USA. A security vulnerability exists in IBM MQ Appliance that originates from a vulnerability that can be exploited by an attacker to read IBM MQ Appliance files via insufficient...
PT-2022-17265 · Hms · Hms
Name of the Vulnerable Software and Affected Versions: HMS version 1.0 Description: An issue with access control in HMS allows unauthenticated attackers to read and modify all PHP files. Recommendations: For HMS version 1.0, consider restricting access to PHP files until a fix is available. As a...
CVE-2021-40841
A Path Traversal vulnerability for a log file in LiveConfig 2.12.2 allows authenticated attackers to read files on the underlying server...
Path traversal
A Path Traversal vulnerability for a log file in LiveConfig 2.12.2 allows authenticated attackers to read files on the underlying server...
