13965 matches found
CVE-2021-22886
Rocket.Chat before 3.11, 3.10.5, 3.9.7, 3.8.8 is vulnerable to persistent cross-site scripting XSS using nested markdown tags allowing a remote attacker to inject arbitrary JavaScript in a message. This flaw leads to arbitrary file read and RCE on Rocket.Chat desktop app...
PT-2021-15254
Name of the Vulnerable Software and Affected Versions Rocket.Chat versions prior to 3.11 Rocket.Chat version 3.10.5 Rocket.Chat version 3.9.7 Rocket.Chat version 3.8.8 Description The issue allows a remote attacker to inject arbitrary JavaScript in a message using nested markdown tags, leading to...
CVE-2021-22886: Improper Neutralization of Input During Web Page Generation
Rocket.Chat before 3.11, 3.10.5, 3.9.7, 3.8.8 is vulnerable to persistent cross-site scripting XSS using nested markdown tags allowing a remote attacker to inject arbitrary JavaScript in a message. This flaw leads to arbitrary file read and RCE on Rocket.Chat desktop app...
Hurricane CMS has an arbitrary file read vulnerability
Hurricane CMS is a content management system developed using PHP mysql. Hurricane CMS has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...
Arbitrary File Read Vulnerability in HIM Basic Management Platform of Beijing Zhongchuang Vision Technology Co.
Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. There is an arbitrary file reading vulnerability in the HIM basic management platform of Beijing CCTV Technology Co., Ltd, which can be exploited by an attacker to read all t...
CVE-2020-10584: Improper Limitation of a Pathname to a Restricted Directory
A directory traversal on the /admin/searchby.php script of Invigo Automatic Device Management ADM through 5.0 allows remote attackers to read arbitrary server files accessible to the user running the application...
CVE-2021-1436: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to conduct path traversal attacks and obtain read access to sensitive files on an affected system. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...
PT-2021-2497
Name of the Vulnerable Software and Affected Versions: Cisco IOx affected versions not specified Description: A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to conduct directory traversal attacks and read and write files on the...
EPrints Arbitrary File Read (CVE-2021-3342)
An Arbitrary File Read vulnerability exists in EPrints. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary web script into the effected system...
CVE-2021-21402
Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted requests will allow arbitrary file read from a Jellyfin server's file system. This issue is more prevalent when Windows is used as the host OS. Servers that are exposed to the public...
CVE-2021-21402
Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted requests will allow arbitrary file read from a Jellyfin server's file system. This issue is more prevalent when Windows is used as the host OS. Servers that are exposed to the public...
Design/Logic Flaw
Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted requests will allow arbitrary file read from a Jellyfin server's file system. This issue is more prevalent when Windows is used as the host OS. Servers that are exposed to the public...
CVE-2021-21402
Summary of CVE-2021-21402 (Jellyfin) : A local/file read vulnerability exists in Jellyfin before version 10.7.1, enabling an attacker to read arbitrary files from the serverβs filesystem via crafted requests. The issue is more prevalent when Windows is the host OS and affected servers exposed to ...
CVE-2021-21402
Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted requests will allow arbitrary file read from a Jellyfin server's file system. This issue is more prevalent when Windows is used as the host OS. Servers that are exposed to the public...
PT-2021-14479 Β· Jellyfin Β· Jellyfin
Name of the Vulnerable Software and Affected Versions: Jellyfin versions prior to 10.7.1 Description: The issue allows arbitrary file read from a Jellyfin server's file system with well-crafted requests to certain "API Endpoints". This is more prevalent when Windows is used as the host OS. Server...
CVE-2021-21402: Improper Limitation of a Pathname to a Restricted Directory
Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted requests will allow arbitrary file read from a Jellyfin server's file system. This issue is more prevalent when Windows is used as the host OS. Servers that are exposed to the public...
D-Link DAP-2020 Arbitrary File Read Vulnerability
Founded in 1986 and listed on the Taiwan Stock Exchange in October 1994, D-Link is the first Internet company in Taiwan Province of China to be listed on the Taiwan Stock Exchange. The AUO Group D-Link, established in 1986 and listed on the Taiwan Stock Exchange of China in October 1994, is the...
GitLab: Arbitrary file read during project import
NOTE! Thanks for submitting a report! Please replace all the parenthesized sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to triage and respond quickly, so be sure to take your time filling out the report! Summary A mis-usage of json sche...
Apache Solr Arbitrary File Read Vulnerability
Apache Solr is an independent enterprise-class search application server , it provides similar to the external Web-service API interface . Users can request via http, to the search engine server to submit a certain format of the XML file , to generate the index ; can also be operated through the...
Arbitrary File Read Vulnerability in Apache Solr System
Apache Solr is an open source search service , using the Java language development , mainly based on HTTP and Apache Lucene implementation . Apache Solr system suffers from an arbitrary file read vulnerability, which can be exploited by an attacker to obtain sensitive information...