DEBIAN-CVE-2016-1231

Directory traversal vulnerability in the HTTP file-serving module modhttpfiles in Prosody 0.9.x before 0.9.9 allows remote attackers to read arbitrary files via a .. dot dot in an unspecified path...

CVE-2015-7935

Motorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2015-7935

Motorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via unspecified vectors...

The vulnerability of the Microsoft SharePoint Server corporate application allows a hacker to read arbitrary files.

The vulnerability of the InfoPath Forms Services component of the Microsoft SharePoint Server corporate application suite is related to deficiencies in access control mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to read arbitrary files using a specially...

SUSE: Security Advisory for MozillaFirefox (SUSE-SU-2015:0412-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

H2O Directory Traversal Vulnerability

H2O is a set of open source Web server software . H2O suffers from a directory traversal vulnerability. When the program uses the file.dir directive, a remote attacker can exploit the vulnerability to read arbitrary files with the help of a specially crafted URL...

Joyent Node.js Geddy Directory Traversal Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on Google V8 JavaScript engine on top of the platform. Geddy is one of the front-end framework. A directory traversal vulnerability exists in the lib/app/index.js file in Joyent Node.js Geddy 13.0.7 and earlier...

SAP Mobile Platform application import XML external entity vulnerability

SAP Mobile Platform SMP is a mobile application development platform from SAP. The platform is used to build packaged and customized development applications for any device. An XML external entity vulnerability exists in the application import feature of SMP version 2.3. A remote attacker can...

PYSEC-2015-39

The import task action in OpenStack Image Service Glance 2015.1.x before 2015.1.2 kilo, when using the V2 API, allows remote authenticated users to read arbitrary files via a crafted backing file for a qcow2 image...

UBUNTU-CVE-2015-5531

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls...

Koha Directory Traversal Vulnerability

Koha is the first open source library automation system. Koha suffers from a directory traversal vulnerability that could be exploited by an attacker to read arbitrary files...

VulnCheck KEV: CVE-2015-4495

Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges...

LXC Directory Traversal Vulnerability

LXC is a user-space interface to the Linux kernel's container functionality that makes it easy for Linux users to create and manage system or application containers through a powerful API and simple tools. A local directory traversal vulnerability exists in LXC, which allows a local attacker to...

Kaseya Virtual System Administrator Directory Traversal Vulnerability

Kaseya Virtual System Administrator VSA is a suite of IT system management platforms for simplifying and automating IT services from Kaseya, Switzerland. A directory traversal vulnerability exists in Kaseya VSA. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP...

OpenStack Cinder Information Disclosure Vulnerability (CNVD-2015-04083)

Cinder is OpenStack's chunked storage service. A security vulnerability exists in OpenStack Cinder, which can be exploited by an authenticated remote user to read arbitrary files by using a constructed graphical qcow2 signature within the upload-to-image command...

Elastic Elasticsearch < 1.4.5, 1.5.x < 1.5.2 Directory Traversal Vulnerability - Active Check

Elastic Elasticsearch is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

USN-2581-1 network-manager vulnerability

Tavis Ormandy discovered that NetworkManager incorrectly filtered paths when requested to read modem device contexts. A local attacker could possibly use this issue to bypass privileges and manipulate modem device configuration or read arbitrary files...

VulnCheck KEV: CVE-2015-0666

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager DCNM allows remote attackers to read arbitrary files...

GNU patch local directory traversal vulnerability

A GNU patch is a part of the GNU project that is the base patch to be installed when installing a theme package. A local directory traversal vulnerability exists in GNU patch that stems from the program failing to adequately filter user-submitted input. A local attacker could use this vulnerabili...

cups: insufficient checking leads to privilege escalation

It was discovered that CUPS allowed certain users to create symbolic links in certain directories under /var/cache/cups/. A local user with the 'lp' group privileges could use this flaw to read the contents of arbitrary files on the system or, potentially, escalate their privileges on the system...