CVE-2021-40510

XML eXternal Entity XXE in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs...

Xxe

XML eXternal Entity XXE in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs...

CVE-2021-40510

XML eXternal Entity XXE in OBDA systems’ Mastro 1.0 allows remote attackers to read system files via custom DTDs...

OBDA systems Mastro 代码问题漏洞

OBDA systems Mastro is a Java tool for ontology-based data access OBDA from OBDA systems, Italy. A code issue vulnerability exists in OBDA systems Mastro version 1.0. An attacker could use this vulnerability to read system files via a custom DTD...

CVE-2022-31062

Impact A plugin public script can be used to read content of system files. Patches Upgrade to version 1.0.2. Workarounds b/deploy/index.php file can be deleted if deploy feature is not used...

Security feature bypass

Impact A plugin public script can be used to read content of system files. Patches Upgrade to version 1.0.2. Workarounds b/deploy/index.php file can be deleted if deploy feature is not used...

CVE-2022-31062 Unauthenticated Local File Inclusion

Impact A plugin public script can be used to read content of system files. Patches Upgrade to version 1.0.2. Workarounds b/deploy/index.php file can be deleted if deploy feature is not used...

PT-2022-20499 · Plugin · Plugin

Name of the Vulnerable Software and Affected Versions: Plugin versions prior to 1.0.2 Description: A plugin public script can be used to read the content of system files. Recommendations: For versions prior to 1.0.2, upgrade to version 1.0.2. As a temporary workaround, consider deleting the...

CVE-2022-31062

GLPI Inventory Plugin for GLPI is affected by an unauthenticated Local File Inclusion vulnerability in versions before 1.0.2. A public script in the plugin can be used to read system files (root cause: public file/script exposed under b/deploy/index.php path). Impact is reading contents of system...

GLPI Inventory Plugin 路径遍历漏洞

GLPI Inventory Plugin is a French GLPI open source plugin . It is used to handle various types of tasks for GLPI agents. A path traversal vulnerability exists in versions prior to GLPI Inventory Plugin 1.0.2, which stems from a public script that can be used to read the contents of system files...

CVE-2022-31062 Unauthenticated Local File Inclusion

Impact A plugin public script can be used to read content of system files. Patches Upgrade to version 1.0.2. Workarounds b/deploy/index.php file can be deleted if deploy feature is not used...

Exploit for CVE-2022-31749

Hook Hook exploits a parameter injection vulnerability in the...

QNAP QTS 4.3.6 < 4.3.6 build 20190919 / 4.4.1 < 4.4.1 build 20190918 Multiple Vulnerabilities (NAS-201911-25)

The version of QNAP QTS installed on the remote host is affected by multiple vulnerabilities, as follows: - An improper input validation vulnerability that allows remote attackers to inject arbitrary code to the system. CVE-2019-7193 - Two external control of file name or path vulnerabilities tha...

CVE-2022-26057

Vulnerabilities in the Mint WorkBench allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Mint WorkBench installer file allows a low-privileged user to run a "repair" operation o...

PT-2022-20615 · Abb · Abb Automation Builder

Name of the Vulnerable Software and Affected Versions: Drive Composer affected versions not specified ABB Automation Builder affected versions not specified Description: The issue allows a low-privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary...

QNAP Photo Station Multiple Vulnerabilities (NAS-201911-25)

The version of Photo Station running on the remote QNAP NAS is affected by multiple vulnerabilities, as follows: - This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest...

QNAP Photo Station Path Traversal Vulnerability

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files...

QNAP Photo Station Path Traversal Vulnerability

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files...

The vulnerability of the CLI component of Fortinet’s FortiAP-S/W2 and FortiAP software solutions allows a hacker to overwrite system files.

The vulnerability of the CLI microprogramming software for Fortinet’s FortiAP-S/W2 and FortiAP devices exists due to insufficient verification of input data in the administration consoles. Exploiting this vulnerability allows a malicious actor to re-write system files using specially created...

CVE-2022-29597

CVE-2022-29597 affects Solutions Atlantic Regulatory Reporting System (RRS) v500. It exposes a Local File Inclusion (LFI) vulnerability via the ShowDocument/ShowDocument.aspx page, where an authenticated user can abuse the fileName parameter to reference internal system files (eg. web.config) and...