Adobe Reader Mobile Path Traversal Vulnerability

Adobe Reader Mobile is a mobile application for reading PDF documents. A directory traversal vulnerability exists in Adobe Reader Mobile, which allows remote attackers to submit a special request that can be exploited to read the contents of system files...

Microsoft Windows WalletService Denial of Service Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A denial of service vulnerability exists in Microsoft Windows WalletService, which arises...

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files. To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privilege...

Windows WalletService Denial of Service Vulnerability

A denial of service vulnerability exists in the way that the WalletService handles files. An attacker who successfully exploited the vulnerability could corrupt system files. To exploit the vulnerability, an attacker would first need code execution on a victim system. An attacker could then run a...

XML External Entity (XXE)

adal4j is vulnerable to XML External Entity XXE. The vulnerability exists because the external DTDs are not disabled by default in WSTrustResponse parse function in WSTrustResponse.java and getWsTrustEndpointFromMexResponse function in MexParser.java, allowing an attacker to submit a malicious XM...

Langfang Extreme Networks Technology Co., Ltd Extreme CMS has arbitrary file download vulnerability

Extreme CMS is an open source and free PHPCMS web content management system. Ltd Extreme CMS has an arbitrary file download vulnerability that can be exploited by an attacker to read any file in the system...

Samsung Mobile Device Path Traversal Vulnerability (CNVD-2020-38180)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. A path traversal vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to access system files...

CVE-2020-15583

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. StickerProvider allows directory traversal for access to system files. The Samsung ID is SVE-2020-17665 July 2020...

Directory traversal

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. StickerProvider allows directory traversal for access to system files. The Samsung ID is SVE-2020-17665 July 2020...

CVE-2020-15583

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. StickerProvider allows directory traversal for access to system files. The Samsung ID is SVE-2020-17665 July 2020...

CVE-2020-15583

This CVE pertains to Samsung mobile devices running O(8.x), P(9.0), and Q(10.0) where the StickerProvider allows directory traversal to access system files. Root cause: improper validation in the StickerProvider component enables path traversal that could lead to exposure of sensitive files. The ...

CVE-2020-12782

Openfind MailGates contains a Command Injection flaw, when receiving email with specific strings, malicious code in the mail attachment will be triggered and gain unauthorized access to system files...

CVE-2020-12782

Openfind MailGates contains a Command Injection flaw, when receiving email with specific strings, malicious code in the mail attachment will be triggered and gain unauthorized access to system files...

VulnCheck KEV: CVE-2019-7195

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files...

VulnCheck KEV: CVE-2019-7194

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files...

Secure Computing SnapGear Management Console SG560 v3.1.5 Arbitrary File Read/Write

Summary The SG gateway appliance range provides Internet security and privacy of communications for small and medium enterprises, and branch offices. It simply and securely connects your office to the Internet, and with its robust stateful firewall, shields your computers from external threats...

Critical SAP ASE Flaws Allow Complete Control of Databases

Researchers are urging users to apply patches for several critical vulnerabilities in SAP’s Adaptive Server Enterprise ASE. If exploited, the most severe flaws could give unprivileged users complete control of databases and – in some cases – even underlying operating systems. ASE previously known...

Directory Traversal

spring-cloud-config-server is vulnerable to directory traversal. The vulnerability exists as it does not verify that the resources are served from allowed locations. An attacker is able to retrieve and read arbitrary system files using file:// or ../ characters...

CVE-2019-15709

An improper input validation in FortiAP-S/W2 6.2.0 to 6.2.2, 6.0.5 and below, FortiAP-U 6.0.1 and below CLI admin console may allow unauthorized administrators to overwrite system files via specially crafted tcpdump commands in the CLI...

Input validation

An improper input validation in FortiAP-S/W2 6.2.0 to 6.2.2, 6.0.5 and below, FortiAP-U 6.0.1 and below CLI admin console may allow unauthorized administrators to overwrite system files via specially crafted tcpdump commands in the CLI...