Path traversal

Path Traversal vulnerability exists in Metasys Reporting Engine MRE Web Services which could allow a remote unauthenticated attacker to access and download arbitrary files from the system...

CVE-2020-9050

The CVE-2020-9050 entry concerns Johnson Controls Metasys Reporting Engine (MRE) Web Services, where a Path Traversal vulnerability allows a remote unauthenticated attacker to access and download arbitrary files from the system. Affected versions include MRE v2.0 and v2.1; impact is high on confi...

PT-2021-12822

Name of the Vulnerable Software and Affected Versions: Metasys Reporting Engine MRE Web Services affected versions not specified Description: A Path Traversal issue exists in the Metasys Reporting Engine MRE Web Services, allowing a remote unauthenticated attacker to access and download arbitrary...

CVE-2020-9050: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal vulnerability exists in Metasys Reporting Engine MRE Web Services which could allow a remote unauthenticated attacker to access and download arbitrary files from the system...

CVE-2020-9050

Path Traversal vulnerability exists in Metasys Reporting Engine MRE Web Services which could allow a remote unauthenticated attacker to access and download arbitrary files from the system...

How to Secure AWS Cloud Storage

Discover how to quickly install and integrate Trend Micro Cloud One with Amazon Web Services AWS...

Johnson Controls Metasys Reporting Engine Web Services Path Traversal Vulnerability

Johnson Controls Metasys Reporting Engine Web Services is a system hardware from Johnson Controls USA. Providing this web controller uses the latest developments in information technology to ensure that Metasys systems easily integrate and connect to expanding browsers and remote operation center...

The vulnerability of web services in the Spring Framework software platform allows attackers to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of web services in the Spring Framework is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of information...

The vulnerability of Apache CXF web services lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform cross-site scripting attacks.

The vulnerability of Apache CXF web services is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the styleSheetPath parameter...

The vulnerability of the components of Web Services in Oracle WebLogic Server’s application servers allows attackers to gain access to modify, add, or delete data.

The vulnerability of the components of Oracle WebLogic Server’s application services is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP protocol over the network...

UBUNTU-CVE-2020-13576

A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability...

SAP BusinessObjects Business Intelligence Platform SSRF Vulnerability (direct check)

Binary data sapbusinessobjectsintelligenceplatformcve-2020-6308.nbin...

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime Affect Connect:Direct Web Services

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 8.0.6.5, used by Connect : Direct web service. Connect:Direct Web Services has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-2805 DESCRIPTION: An unspecified vulnerability in Java SE relat...

Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software

Cisco Adaptive Security Appliance Software and Firepower Threa...

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime Affect IBM Connect:Direct Web Services

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 8.0.6.5, used by IBM Connect:Direct Web Services. IBM Connect:Direct Web Services has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-2989 DESCRIPTION: An unspecified vulnerability in Java S...

CVE-2021-20184

It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able to view other students grades...

CVE-2021-20184

It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able to view other students grades...

Design/Logic Flaw

It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able to view other students grades...

CVE-2021-20184

It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able to view other students grades...

CVE-2021-20184

CVE-2021-20184 : Moodle suffers from insufficient capability checks in grade-related web services, allowing students to view other students’ grades. Affected versions are Moodle releases before 3.10.1, 3.9.4, and 3.8.7. The issue enables information disclosure without explicit exploits described ...