2241 matches found
Design/Logic Flaw
A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to sanitize paths in remote repository metadata. An attacker controlling a remote repository may be able to copy files outside of the destination directory on the targeted system v...
Cisco Webex Meetings Desktop App for Windows Arbitrary File Overwrite Vulnerability
A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an unauthenticated, remote attacker to overwrite arbitrary files on an end-user system. The vulnerability is due to improper validation of URL parameters that are sent from a website to the affected application. An attack...
Path Traversal in simbco/httpster
Description I would like to report a Path Traversal vulnerability in the httpster module. It allows an attacker to read system files via a Path Traversal vulnerability. With a symbolically linked file in the working directory, it is possible to read arbitrary files outside of the web root...
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files. To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privilege...
Debian DLA-2314-1 : clamav security update
Several vulnerabilities have been found in the ClamAV antivirus toolkit : CVE-2020-3327 An out of bounds read in the ARJ archive-parsing module could cause denial of service. The fix in 0.102.3 was incomplete. CVE-2020-3350 A malicious user could trick clamscan, clamdscan or clamonacc into moving...
CVE-2020-12081
An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be used to access to system files or other important files on the system...
CVE-2020-12081
An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be used to access to system files or other important files on the system...
Information disclosure
An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be used to access to system files or other important files on the system...
CVE-2020-12081
CVE-2020-12081 corresponds to an information-disclosure vulnerability in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be abused to access system files or other important files on the host. The connected sources do not provide explicit exploit details (no in-the-wild exploitati...
CVE-2020-12081
An information disclosure vulnerability has been identified in FlexNet Publisher lmadmin.exe 11.14.0.2. The web portal link can be used to access to system files or other important files on the system...
Directory Traversal
marked-tree is vulnerable to directory traversal. Lack of sanitization of the file path allows an attacker to access arbitrary system files outside of the web root...
Path Traversal
rollup-plugin-server is vulnerable to path traversal attack. The vulnerability exists due to a lack of proper handling of user-provided path parameters in the readFile operation performed inside the readFileFromContentBase function, allowing an attacker to access arbitrary system files using...
Adobe Reader Mobile Path Traversal Vulnerability
Adobe Reader Mobile is a mobile application for reading PDF documents. A directory traversal vulnerability exists in Adobe Reader Mobile, which allows remote attackers to submit a special request that can be exploited to read the contents of system files...
Microsoft Windows WalletService Denial of Service Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A denial of service vulnerability exists in Microsoft Windows WalletService, which arises...
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files. To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privilege...
Windows WalletService Denial of Service Vulnerability
A denial of service vulnerability exists in the way that the WalletService handles files. An attacker who successfully exploited the vulnerability could corrupt system files. To exploit the vulnerability, an attacker would first need code execution on a victim system. An attacker could then run a...
XML External Entity (XXE)
adal4j is vulnerable to XML External Entity XXE. The vulnerability exists because the external DTDs are not disabled by default in WSTrustResponse parse function in WSTrustResponse.java and getWsTrustEndpointFromMexResponse function in MexParser.java, allowing an attacker to submit a malicious XM...
Langfang Extreme Networks Technology Co., Ltd Extreme CMS has arbitrary file download vulnerability
Extreme CMS is an open source and free PHPCMS web content management system. Ltd Extreme CMS has an arbitrary file download vulnerability that can be exploited by an attacker to read any file in the system...
Samsung Mobile Device Path Traversal Vulnerability (CNVD-2020-38180)
Android is a free and open source operating system from Google based on the Linux kernel without GNU components. A path traversal vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to access system files...