UBUNTU-CVE-2019-19499

Grafana = 6.4.3 has an Arbitrary File Read vulnerability, which could be exploited by an authenticated attacker that has privileges to modify the data source configurations...

CVE-2019-19499

Grafana = 6.4.3 has an Arbitrary File Read vulnerability, which could be exploited by an authenticated attacker that has privileges to modify the data source configurations...

CVE-2019-19499

Grafana

CVE-2019-19499

Grafana = 6.4.3 has an Arbitrary File Read vulnerability, which could be exploited by an authenticated attacker that has privileges to modify the data source configurations...

CVE-2019-19499: Improper Neutralization of Special Elements used in an SQL Command

Grafana = 6.4.3 has an Arbitrary File Read vulnerability, which could be exploited by an authenticated attacker that has privileges to modify the data source configurations...

CVE-2020-5916

In BIG-IP versions 15.1.0-15.1.0.4 and 15.0.0-15.0.1.3 the Certificate Administrator user role and higher privileged roles can perform arbitrary file reads outside of the web root directory...

CVE-2020-3521: Improper Input Validation

A vulnerability in a specific REST API of Cisco Data Center Network Manager DCNM Software could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. The vulnerability is due to insufficient validation of user-supplied input to the API. An attacker...

CVE-2020-5916: Improper Privilege Management

In BIG-IP versions 15.1.0-15.1.0.4 and 15.0.0-15.0.1.3 the Certificate Administrator user role and higher privileged roles can perform arbitrary file reads outside of the web root directory...

DBHcms Arbitrary File Read Vulnerability

DBHcms is a small, free and open source content management system for personal and small business websites. An arbitrary file read vulnerability exists in dbhcmsmodmod.editor.php $GET'file' in DBHcms 1.2.0. Attackers can use the vulnerability to read the contents of any file...

CVE-2020-19890

DBHcms v1.2.0 has an Arbitrary file read vulnerability in dbhcms\mod\mod.editor.php $GET'file' is filename,and as there is no filter function for security, you can read any file's content...

CVE-2020-19890

DBHcms v1.2.0 has an Arbitrary file read vulnerability in dbhcms\mod\mod.editor.php $GET'file' is filename,and as there is no filter function for security, you can read any file's content...

CVE-2020-19890

CVE-2020-19890 affects DBHcms v1.2.0. An arbitrary file read flaw exists in the file path handling for the editor module (dbhcms/mod/mod.editor.php) where $_GET['file'] is not filtered, allowing reading of arbitrary files. This is a server-side vulnerability impacting confidentiality; the provide...

CVE-2020-19890

DBHcms v1.2.0 has an Arbitrary file read vulnerability in dbhcms\mod\mod.editor.php $GET'file' is filename,and as there is no filter function for security, you can read any file's content...

CVE-2020-19890

DBHcms v1.2.0 has an Arbitrary file read vulnerability in dbhcms\mod\mod.editor.php $GET'file' is filename,and as there is no filter function for security, you can read any file's content...

CVE-2020-19890: Authorization Bypass Through User-Controlled Key

DBHcms v1.2.0 has an Arbitrary file read vulnerability in dbhcms\mod\mod.editor.php $GET'file' is filename,and as there is no filter function for security, you can read any file's content...

PT-2020-15216

Name of the Vulnerable Software and Affected Versions DBHcms version 1.2.0 Description The issue allows for arbitrary file read due to a lack of security filtering in the mod.editor.php module. Specifically, the $ GET'file' variable is used to specify the filename without proper validation,...

CVE-2020-24052: Improper Restriction of XML External Entity Reference

Several XML External Entity XXE vulnerabilities in the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units allow remote unauthenticated users to read arbitrary files via a crafted Document Type Definition DTD in an XML request...

Arbitrary File Read Vulnerability in UCMS

UCMS is an open source content management system, which can be used to quickly develop a variety of enterprise stations, article stations and station systems. UCMS has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2020-8209

Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 and leads to the ability to read arbitrary files...

CVE-2020-8209

Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 and leads to the ability to read arbitrary files...