Jenkins Kubernetes Continuous Deploy Plugin path traversal vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.The Jenkins Kubernetes Continuous Deploy...

PT-2021-14166

Name of the Vulnerable Software and Affected Versions: CLUSTERPRO X versions 4.3 and earlier EXPRESSCLUSTER X versions 4.3 and earlier CLUSTERPRO X SingleServerSafe versions 4.3 and earlier EXPRESSCLUSTER X SingleServerSafe versions 4.3 and earlier Description: The issue is related to improper...

Online Traffic Offense Management System 1.0 - Privilage escalation (Unauthenticated)

Exploit Title: Online Traffic Offense Management System 1.0 - Privilage escalation Unauthenticated Date: 07/10/2021 Exploit Author: Hubert Wojciechowski Contact Author: [email protected] Vendor Homepage: https://www.sourcecodester.com Software Link:...

Sonatype Nexus Repository Manager IQ path traversal vulnerability

Sonatype Nexus Repository Manager IQ is a Sonatype open source application. The policy management and component intelligence features for IQ Server are integrated with the agent repository in Nexus Repository Manager Pro. A security vulnerability exists in Sonatype Nexus Repository Manager IQ. An...

Discord Recon Server parameter injection vulnerability

Discord Recon Server is an AI bot from Discord USA. Discord-Recon suffers from a parameter injection vulnerability that can be exploited by an attacker to read internal files from the system and write the files to the system, leading to remote code execution...

CVE-2020-13449

A directory traversal vulnerability in the Markdown engine of Gotenberg through 6.2.1 allows an attacker to read any container files...

CVE-2020-16919

An information disclosure vulnerability exists when the Windows Enterprise App Management Service improperly handles certain file operations. An attacker who successfully exploited this vulnerability could read arbitrary files. An attacker with unprivileged access to a vulnerable system could...

PT-2020-15523 · Jenkins · Jenkins Persona Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Persona Plugin versions 2.4 and earlier Description: The issue allows users with Overall/Read permission to read arbitrary files on the Jenkins controller. Recommendations: For Jenkins Persona Plugin versions 2.4 and earlier, update t...

Directory traversal

An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. Directory traversal exists for reading files, as demonstrated by the FileName parameter...

PT-2020-16034

Name of the Vulnerable Software and Affected Versions Hyland OnBase versions prior to 16.0.2.84 Hyland OnBase versions prior to 17.0.2.110 Hyland OnBase versions prior to 18.0.0.38 Hyland OnBase versions prior to 19.8.16.1001 Hyland OnBase versions prior to 20.3.10.1001 Description An issue exist...

Gitlab -- Multiple Vulnerabilities

Gitlab reports: Workhorse bypass allows files in /tmp to be read via Maven Repository APIs...

PT-2020-15081

Name of the Vulnerable Software and Affected Versions HUAWEI Mate 10 smartphones versions prior to 10.0.0.143C00E143R2P4 Description The issue allows an attacker to exploit a series of crafted voice operations to wake up the voice assistant, potentially leading to information disclosure by readin...

dotCMS code problem vulnerability

dotCMS is a content management system CMS from the United States dotCMS. The system supports RSS feeds , blogs , forums and other modules , and is easy to extend and build features . A code issue vulnerability exists in dotCMS versions prior to 5.2.4 that stems from faulty access control. An...

CVE-2020-8996

AnyShare Cloud 6.0.9 allows authenticated directory traversal to read files, as demonstrated by the interface/downloadwithpath/downloadfile/?filepath=/etc/passwd URI...

PT-2020-20417

Name of the Vulnerable Software and Affected Versions AnyShare Cloud version 6.0.9 Description The issue allows authenticated directory traversal, enabling the reading of files. This is demonstrated by accessing the "interface/downloadwithpath/downloadfile/?filepath=/etc/passwd" API endpoint...

Simple Machines Forum File Disclosure Vulnerability

Simple Machines Forum SMF is an open source web forum system by the SMF team in the United States. A file disclosure vulnerability exists in SMF 2.0.3. and earlier versions, which can be exploited to read arbitrary files on the file system and gain new privileges by reading the settings.php file...

Directory Traversal

iobroker.admin is vulnerable to directory traversal. The vulnerability exists as it allows reading of files that exists outside the public folder by adding %2e%2e/ in the requested file path...

PT-2019-11671

Name of the Vulnerable Software and Affected Versions Ahsay Cloud Backup Suite versions prior to 8.1.1.50 Description An issue allows reading the file structure and content of files without authentication by sending an out-of-bounds XML document to a URL. Recommendations For versions prior to...

PYSEC-2019-184

Ladon since 0.6.1 since ebef0aae48af78c159b6fce81bc6f5e7e0ddb059 is affected by: XML External Entity XXE. The impact is: Information Disclosure, reading files and reaching internal network endpoints. The component is: SOAP request handlers. For instance:...

Rancher Labs Rancher Command Injection Vulnerability

Rancher Labs Rancher is the United States Rancher Labs, Inc. of a set of open source enterprise-class container management platform. A command injection vulnerability exists in Rancher Labs Rancher. An attacker can exploit this vulnerability to read files or execute arbitrary commands...