2357 matches found
Arbitrary File Deletion Vulnerability in Xiancheng Article Management System (Dynamic Edition)
Xiancheng article management system is a PHP + Mysql development of the program, the front of the DIV + CSS layout, PHP template separation technology. The main features are spider crawling statistician, unlimited classification, background multi-frame small window operation. Xiancheng article...
Advisory ROSA-SA-2021-1886
Software: librepo 1.8.1 OS: Cobalt 7.9 CVE-ID: CVE-2020-14352 CVE-Crit: HIGH CVE-DESC: A bug was discovered in librepo in versions prior to 1.12.1. A directory traversal vulnerability was discovered where paths in remote repository metadata could not be cleared. An attacker controlling a remote...
Johnson Controls Facility Explorer 安全漏洞
Johnson Controls Facility Explorer is a monitoring controller from Johnson Controls that provides scalable system-wide monitoring and control. A security vulnerability exists in Johnson Controls Facility Explorer that stems from improper privilege management and can be exploited by an attacker to...
Logic Flaw Vulnerability in YCCMS
YCCMS is a PHP version of a lightweight CMS builder. YCCMS has a logic flaw vulnerability that can be exploited by attackers to delete system files...
Arbitrary File Read Vulnerability in NBR6210-E
NBR6210-E is an Internet Behavior Management router from Riptide, which is designed for office full scenarios. The NBR6210-E suffers from an arbitrary file read vulnerability that can be exploited by an attacker to read arbitrary system files...
samsung WLAN AP suffers from an arbitrary file download vulnerability
Samsung China Investment Co., Ltd. is the headquarters of Samsung Group in China. By the end of 2008, 20 out of more than 30 companies under Samsung have invested in China, including Samsung Electronics, Samsung SDI, Samsung SDS and Samsung Electro-Mechanics. Samsung WLAN AP arbitrary file downlo...
AGG Software Web Server Plugin
1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: AGG Software Equipment: Web Server Vulnerabilities: Path Traversal, Cross-site Scripting 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow remote code execution and...
SUSE: Security Advisory (SUSE-SU-2018:3456-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Directory Traversal
@backstage/techdocs-common is vulnerable to directory traversal. An attacker can read arbitrary system files from the environment where TechDocs documentation is built and published by setting a particular path for docsdir in mkdocs.yml...
Johnson Controls Metasys 安全漏洞
Johnson Controls Metasys system is the United States Johnson Controls Johnson Controls company's set of building automation system. A security vulnerability exists in Johnson Controls Metasys version 11.0 and prior versions that can be exploited by an attacker to send specially crafted web messag...
OpenVPN has an unspecified vulnerability
Openvpn OpenVPN is a software package from the American company OpenVPN Openvpn for creating encrypted tunnels for Virtual Private Networks VPNs, which uses the OpenSSL library to encrypt data and control information, and allows created VPNs to be authenticated using a public key, an e-certificat...
The vulnerability of the Exim message transfer agent, related to privilege management errors, allows a hacker to delete any files in the system at will.
The vulnerability of the Exim message transfer agent is related to privilege management errors. Exploiting this vulnerability could allow an attacker to delete arbitrary files from the system...
CVE-2020-15076
Private Tunnel installer for macOS version 3.0.1 and older versions may corrupt system critical files it should not have access via symlinks in /tmp...
Code injection
Private Tunnel installer for macOS version 3.0.1 and older versions may corrupt system critical files it should not have access via symlinks in /tmp...
Juniper Junos OS Information Disclosure (JSA11126)
The version of Junos OS installed on the remote host is affected by an information disclosure vulnerability. A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files as referenced in the JSA11126 advisory. Note...
Check Point Identity Agent Backlink Vulnerability
Check Point Identity Agent is an application from Check Point USA. It is used to obtain and report identities to the Check Point Identity Awareness Security Gateway. A back-link vulnerability exists in versions prior to Check Point Identity Agent R81.018.0000, which allows a less privileged user ...
CVE-2021-0231
A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue affects Juniper Networks Junos OS on SRX and vSRX Series: 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R2-S4,...
Path traversal
A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue affects Juniper Networks Junos OS on SRX and vSRX Series: 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R2-S4,...
CVE-2021-0231
CVE-2021-0231 describes a path-traversal information-disclosure vulnerability in Juniper Networks Junos OS on SRX and vSRX Series. An authenticated J-web user can read sensitive system files. Affected versions include Junos OS 19.3 up to 19.3R2-S6 and 19.3R3-S1; 19.4 up to 19.4R2-S4 and 19.4R3; 2...