CVE-2025-58081: Use of Hard-coded Password

Use of hard-coded password issue/vulnerability in SS1 Ver.16.0.0.10 and earlier Media version:16.0.0a and earlier allows a remote unauthenticated attacker to view arbitrary files with root privileges...

CVE-2023-35020: Improper Limitation of a Pathname to a Restricted Directory

IBM Sterling Control Center 6.3.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 257874...

CVE-2020-18127: Improper Limitation of a Pathname to a Restricted Directory

An issue in the /config/config.php component of Indexhibit 2.1.5 allows attackers to arbitrarily view files...

CVE-2006-1601: Undefined Security Weakness

Unspecified vulnerability in SunPlex Manager in Sun Cluster 3.1 4/04 allows local users with solaris.cluster.gui authorization to view arbitrary files via unspecified vectors...

CVE-2004-2445: Undefined Security Weakness

Directory traversal vulnerability in index.php in Jaws 0.3 BETA allows remote attackers to view arbitrary files via a .. dot dot in the gadget parameter...

CVE-2004-1980: Undefined Security Weakness

Directory traversal vulnerability in glossary.php in PROPS 0.6.1 allows remote attackers to view arbitrary files via a .. dot dot in 1 module or 2 format variables...

CVE-2004-1742

Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files via a .. dot dot in the viewcat parameter...

CVE-2001-0557: Undefined Security Weakness

T. Hauck Jana Webserver 1.46 and earlier allows a remote attacker to view arbitrary files via a '..' dot dot attack which is URL encoded %2e%2e...