CVE-2021-28154

Camunda Modeler aka camunda-modeler through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it...

CVE-2021-28154

Camunda Modeler aka camunda-modeler through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it...

Design/Logic Flaw

DISPUTED Camunda Modeler aka camunda-modeler through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is...

CVE-2021-28154

Camunda Modeler (aka camunda-modeler) ≤ 4.6.0 is affected by an arbitrary file access flaw in the ipcRenderer interface. A remote attacker can send a crafted IPC message to manipulate readFile and writeFile, potentially exposing partial file contents or allowing unauthorized writes. The issue is ...

CVE-2021-28154

Camunda Modeler aka camunda-modeler through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states "The way we secured the app is that it...

IBM WebSphere Application Server Directory Traversal Vulnerability (CNVD-2021-17204)

IBM WebSphere Application Server WAS is by IBM in accordance with open standards, such as Java EE, XML and Web Services, development and distribution of an application server. A directory traversal vulnerability exists in IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0. An attacker can...

PT-2021-17779 · Camunda · Camunda Modeler

Name of the Vulnerable Software and Affected Versions: Camunda Modeler versions through 4.6.0 Description: The issue allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile API...

Nico Rehwaldt camunda-modeler 安全漏洞

Nico Rehwaldt camunda-modeler is a Nico Rehwaldt open source application. Provides an integrated modeling solution for BPMN and DMN based on bpmn.io. A security vulnerability exists in Nico Rehwaldt camunda-modeler version 4.6.0 and earlier versions that allows arbitrary file access...

Siemens Solid Edge XML External Entity Reference Vulnerability

Siemens Solid Edge is a 3D CAD software from Siemens, Germany. The software can be used for part design, assembly design, sheet metal design, welding design and other industries. Siemens Solid Edge suffers from an XML external entity reference vulnerability. The vulnerability stems from when...

Veritas Backup Exec Remote Agent 16.x < 21.2 Multiple Vulnerabilities (VTS21-001)

The version of Veritas Backup Exec Remote Agent installed on the remote Windows host is 16.x prior to 21.2. It is, therefore, affected by multiple vulnerabilities, as follows: - An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires...

CVE-2021-27876

An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typically completed over a secure TLS communication. However, due to a vulnerability in the SHA Authentication scheme, an attacker is able to ga...

PT-2021-7748

Name of the Vulnerable Software and Affected Versions Veritas Backup Exec versions prior to 21.2 Description An issue exists in Veritas Backup Exec related to flaws in the SHA authentication scheme. This can allow an attacker to gain unauthorized access and complete the authentication process...

IBM WebSphere Application Server Directory Traversal Vulnerability (CNVD-2021-11048)

IBM WebSphere Application Server WAS is by IBM in accordance with open standards, such as Java EE, XML and Web Services, development and distribution of an application server. A directory traversal vulnerability exists in IBM WebSphere Application Server 8.0, 8.5, and 9.0. An attacker can cause a...

CVE-2020-29448

CVE-2020-29448 affects Atlassian Confluence Server/Data Center. Affected ConfluenceResourceDownloadRewriteRule allows unauthenticated remote retrieval of arbitrary files in WEB-INF and META-INF due to an incorrect path access check. Impact is read-only exposure of restricted files; no exploitatio...

IBM WebSphere Application Server和WebSphere Application 路径遍历漏洞

IBM WebSphere Application Server WAS is by IBM in accordance with open standards, such as Java EE, XML and Web Services, development and distribution of an application server. A directory traversal vulnerability exists in IBM WebSphere Application Server 8.0, 8.5, and 9.0. An attacker can cause a...

CVE-2021-22857

The CGE page with download function contains a Directory Traversal vulnerability. Attackers can use this loophole to download system files arbitrarily...

CVE-2021-20072

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to arbitrarily access and delete files via an authenticated directory traveral...

Racom 路径遍历漏洞

The RACOM M!DGE is a cellular router designed for SCADA and telemetry mission-critical applications and is ideally suited for many different wireless applications. A directory traversal vulnerability exists in RACOM M!DGE firmware version 4.4.40.105. An attacker could exploit this vulnerability t...

SINEC NMS 路径遍历漏洞

Siemens SINE CNMS is the new generation of network management system Enterprise for digital libraries. This system can be used to centrally monitor, manage and configure networks.Siemens SINEMA Server is Siemens' network monitoring and management software for industrial Ethernet. A directory...

IBM Content Navigator Directory Traversal Vulnerability

IBM Content Navigator is a Web client that provides users with a console that enables them to access, manage, and use corporate content anytime, anywhere, from any location in the organization on virtually any mobile device. A directory traversal vulnerability exists in IBM Content Navigator...