CVE-2013-5328

Adobe ColdFusion 10 before Update 12 allows remote attackers to read arbitrary files via unspecified vectors...

OpenJDK: image conversion out of bounds read (2D, 8014102)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D...

OpenJDK: image conversion out of bounds read (2D, 8014102)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, and Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D...

magento 1.7.0.1 /lib/Zend/XmlRpc/Request.php 任意文件读取漏洞

No description provided by source...

Timor friends P2P lending system arbitrary file read vulnerability-vulnerability warning-the black bar safety net

Using this system site the back plus the index. php? plugins&q=imgurl&url=QGltZ3VybEAvY29yZS9jb21tb24uaW5jlnboca== Can broke database related information...

Cisco WebEx未初始化内存读取漏洞

BUGTRAQ ID: 59649 CVECAN ID: CVE-2013-1232 WebEx会议服务是Cisco WebEx管理和维护的托管多媒体会议解决方案。 多个Cisco WebEx产品上的Cisco IOS处理HTTP请求时存在错误，通过发送特制的请求到Cisco WebEx节点，未经身份验证的远程攻击者可利用此漏洞读取未初始化的内存。 0 Cisco IOS 15.3 Cisco WebEx 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（CVE-2013-1232）以及相应补丁: CVE-2013-1232：Cisco WebEx...

CVE-2013-3336

Unspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to read arbitrary files via unknown vectors...

Design/Logic Flaw

The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 allows remote attackers to read arbitrary files via a crafted external XML entity in an XML document, aka an XML Entity Expansion XEE attack...

trs inforadar arbitrary file read vulnerability-vulnerability warning-the black bar safety net

Brief description: Doing projects found inforadar arbitrary file read vulnerability Detailed description: Doing projects found inforadar arbitrary file read vulnerability /inforadar/jsp/file/filedownload. jsp? fileType=file&fileName=../../../../../../../../../../../../../../etc/passwd Vulnerabili...

CVE-2012-5574

CVE-2012-5574 affects Symfony CMS: lib/form/sfForm.class.php before 1.4.20 allows remote attackers to read arbitrary files via a crafted upload request, enabling information disclosure. The entry is confirmed across multiple feeds (NVD, Gentoo GLSA 201405-25, OpenVAS entries) and remediation is t...

Security release: symfony 1.4.20 released

symfony 1.4.20 has just been released and it contains a security fix. Uli Hecht contacted us a couple of days ago about a security issue in symfony 1.4. The vulnerability allows reading any file stored on the server if it is readable by the web server. Your application is vulnerable if there is a...

SpeedCMS intelligent enterprise website management system arbitrary file read vulnerability-vulnerability warning-the black bar safety net

inurl:article/file/cid http://xxx.com/Article/file/cid/534/?file=../../../../../../../etc/passwd ! SpeedCMS intelligent enterprise website management system arbitrary file read vulnerability...

phpcms V9 phpcms\modules\search\index.php 任意读文件

No description provided by source...

CVE-2012-2737

The userchangeiconfileauthorizedcb function in /usr/libexec/accounts-daemon in AccountsService before 0.6.22 does not properly check the UID when copying an icon file to the system cache directory, which allows local users to read arbitrary files via a race condition...

PHP 5.4.3 (cli) code read vulnerability

Exploit for php platform in category web applications ============================================================= Exploit Title: PHP 5.4.3 cli code read vulnerability Date: 2012/13/06 Author: cheki Software Link: http://php.net/downloads.php Version: PHP 5.4.3 cli built: May 9 2012 15:06:10...

CVE-2012-1986

Removed by vendor...

Debian: Security Advisory (DSA-2394-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-2394-1 libxml2 - several

Bulletin has no description...

Lighttpd 1.4.30 / 1.5 Denial Of Service

No description provided by source. / Lighttpd versions before 1.4.30 and 1.5 before SVN revision 2806 out-of-bounds read segmentation fault denial of service exploit. Primitive Lighttpd Proof of Concept code for CVE-2011-4362 vulnerability discovered by Xi Wang Here the vulnerable code...

CVE-2011-1416

The Research In Motion RIM BlackBerry Torch 9800 with firmware 6.0.0.246 allows attackers to read the contents of memory locations via unknown vectors, as demonstrated by Vincenzo Iozzo, Willem Pinckaers, and Ralf-Philipp Weinmann during a Pwn2Own competition at CanSecWest 2011...