CVE-2016-4532

Directory traversal vulnerability in the WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to read arbitrary files via a crafted pathname...

Design/Logic Flaw

Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration and log files via a crafted URL...

CVE-2016-1788

Messages in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 does not properly implement a cryptographic protection mechanism, which allows remote attackers to read message attachments via vectors related to duplicate messages...

UBUNTU-CVE-2013-7448

Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get...

The vulnerability of the IBM DB2 database management system allows a hacker to read administrative files.

The vulnerability of the IBM DB2 database management system is related to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to remotely read administrative files by manipulating the maintenance procedures...

Novell Zenworks FileViewer Information Disclosure Vulnerability

This vulnerability allows attackers to obtain sensitive information on vulnerable installations of Novell Zenworks. User interaction is not required to exploit this vulnerability. The specific flaw exists within the FileViewer class. The issue lies in the failure to sanitize the "filename"...

IBM TRIRIGA Application Platform Security Bypass Vulnerability

The IBM TRIRIGA Application Platform is a scalable technology platform for deploying IBM TRIRIGA applications. A security bypass vulnerability in IBM TRIRIGA Application Platform versions 3.2.1.x, 3.3.2.2 prior to 3.3.2.3, and 3.4.1.1 prior to 3.4.1.1 allows a remote attacker to bypass intended...

PYSEC-2014-43

atdownload.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read arbitrary BLOBs Files and Images stored on custom content types via a crafted URL...

ContentServ 4.x - (admin/FileServer.php) File Disclosure Vulnerability

No description provided by source. ContentServ again still features remote reading of arbitrary files ==================================================================== ContentServ is a cms and cross media publishing software. Let me quote from their website: At ContentServ, there is always...

CVE-2013-0182

The Payment module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict access to payments, which allows remote attackers to read arbitrary payments...

flash-plugin: cross-domain information leak flaw (APSB12-19)

Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe AIR SDK before 3.4.0.2540...

CVE-2011-1992

The XSS Filter in Microsoft Internet Explorer 8 allows remote attackers to read content from a different 1 domain or 2 zone via a "trial and error" attack, aka "XSS Filter Information Disclosure Vulnerability."...

UBUNTU-CVE-2011-0244

WebKit in Apple Safari before 5.0.6 allows user-assisted remote attackers to read arbitrary files via vectors related to improper canonicalization of URLs within RSS feeds...

CVE-2009-2184

Absolute path traversal vulnerability in forcedownload.php in Gravy Media Photo Host 1.0.8 allows remote attackers to read arbitrary files via an encoded "/" slash in the file parameter...

CVE-2007-1158

Directory traversal vulnerability in index.php in the Pagesetter 6.2.0 through 6.3.0 beta 5 module for PostNuke allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...

ContentServ 4.x (admin/FileServer.php) File Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================================== ContentServ 4.x admin/FileServer.php File Disclosure Vulnerability ==================================================================== ContentServ again still features...

ContentServ 4.x - adminFileServer.php File Disclosure

ContentServ 4.x - adminFileServer.php File Disclosure ContentServ again still features remote reading of arbitrary files ==================================================================== ContentServ is a cms and "cross media publishing" software. Let me quote from their website: "At ContentSer...

contentserv 4.x

ContentServ again still features remote reading of arbitrary files ==================================================================== ContentServ is a cms and "cross media publishing" software. Let me quote from their website: "At ContentServ, there is always something happening. We continously...