CVE-2020-27993: Improper Limitation of a Pathname to a Restricted Directory

Hrsale 2.0.0 allows download?type=files&filename=../ directory traversal to read arbitrary files...

Pulse Secure Pulse Connect Secure Input Validation Error Vulnerability (CNVD-2020-60092)

Pulse Secure Pulse Connect Secure a.k.a. PCS, formerly known as Juniper Junos Pulse is a suite of SSL VPN solutions from Pulse Secure in the United States. Pulse Connect Secure versions prior to 9.1R9 have an input validation error vulnerability that can be exploited by an attacker to execute an...

Arbitrary File Read Vulnerability in Im***.php File on Qibo's New X1.0 System

Zibo's new X1.0 system is a website management system based on the latest thinkphp5 framework. There is an arbitrary file read vulnerability in the Im.php file of the Qibo New X1.0 system. An attacker can exploit this vulnerability to obtain sensitive information...

CVE-2020-8255

A vulnerability in the Pulse Connect Secure 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary file reading vulnerability is fixed using encrypted URL blacklisting that prevents these messages...

Arbitrary File Read Vulnerability in Zhiyuan OA System

Founded in March 2002 and headquartered in Beijing, Beijing Zhiyuan Internet Software Co., Ltd Zhiyuan Internet has always been focusing on the field of enterprise-level management software, and is a high-tech enterprise integrating product design, research and development, sales and service. The...

CVE-2020-4782

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

AtomXCMS Arbitrary File Read Vulnerability

AtomXCMS is a personal developer of a text management system developed in PHP language . An arbitrary file read vulnerability exists in AtomXCMS version 2.0, which originates from reading arbitrary files via admin dump.php. No detailed vulnerability details are provided at this time...

CVE-2020-26650

AtomXCMS 2.0 is affected by Arbitrary File Read via admin/dump.php...

CVE-2020-26650

AtomXCMS 2.0 is affected by Arbitrary File Read via admin/dump.php...

Design/Logic Flaw

AtomXCMS 2.0 is affected by Arbitrary File Read via admin/dump.php...

CVE-2020-26650

AtomXCMS 2.0 is affected by an Arbitrary File Read vulnerability via admin/dump.php. The CVE describes a file-read flaw allowing unauthorized disclosure of information, with CVSS v3.1 base score 5.3 (Network attack, low complexity, no privileges required) and Confidentiality impact: Low. Affected...

CVE-2020-26650

AtomXCMS 2.0 is affected by Arbitrary File Read via admin/dump.php...

PT-2020-16482

Name of the Vulnerable Software and Affected Versions AtomXCMS version 2.0 Description The issue is related to Arbitrary File Read. It can be exploited via the "admin/dump.php" endpoint. Recommendations For AtomXCMS version 2.0, consider restricting access to the "admin/dump.php" endpoint until a...

CVE-2020-26650: Improper Limitation of a Pathname to a Restricted Directory

AtomXCMS 2.0 is affected by Arbitrary File Read via admin/dump.php...

CloudBees Jenkins Storable Configs Plugin Arbitrary File Read Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An arbitrary file read...

CloudBees Jenkins Copy data to workspace Plugin Arbitrary File Read Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An arbitrary file read...

CVE-2020-6366

SAP NetWeaver Compare Systems versions - 7.20, 7.30, 7.40, 7.50, does not sufficiently validate uploaded XML documents. An attacker with administrative privileges can retrieve arbitrary files including files on OS level from the server and/or can execute a denial-of-service...

Pre-Authorization Arbitrary File Read - access web.xml via curl with no authentication.

https://asecurityteam.atlassian.net/browse/VULN-196971 h3. Issue Summary The Atlassian Confluence, Atlassian Jira, and Atlassian Crowd are vulnerable to a Pre-Authorization Arbitrary File Read attack vector. Specifically, the /s/ endpoint can be accessed in a specific manner that enables...

Arbitrary File Read Vulnerability in Fish Leap CMS

FishLeap CMS is a content management system specifically geared towards enterprise applications. Fishy CMS suffers from an arbitrary file read vulnerability, which can be exploited by an attacker to read arbitrary files on the server...

CVE-2020-16919: Undefined Security Weakness

An information disclosure vulnerability exists when the Windows Enterprise App Management Service improperly handles certain file operations. An attacker who successfully exploited this vulnerability could read arbitrary files. An attacker with unprivileged access to a vulnerable system could...