BlackBerry QNX Software Development Platform Input Validation Error Vulnerability

BlackBerry QNX Software Development Platform is a suite of QNX software development platforms from BlackBerry Canada. The platform is mainly used to develop software based on the QNX platform. A security vulnerability exists in the BlackBerry QNX Software Development Platform versions 6.4.0 throu...

Citrix Systems XenMobile Server Path Traversal Vulnerability

Citrix Systems XenMobile Server is a mobility management solution from Citrix Systems. The solution is able to manage mobile devices, develop mobile policies and compliance rules, and gain insight into the operation of mobile mobile networks. A path traversal vulnerability exists in Citrix System...

Arbitrary File Read Vulnerability in WiseGiga NAS

Shinhan Import & Export Co., Ltd. is a Korean company that sells NAS products. An arbitrary file read vulnerability exists in WiseGiga NAS, which can be exploited by attackers to obtain sensitive information...

Dream CMS suffers from an arbitrary file read vulnerability

Dream CMS, abbreviated as "lmxcms", is an open source website management system cms with no license restrictions. Dream CMS has an arbitrary file reading vulnerability that can be exploited by attackers to read arbitrary files and obtain sensitive information...

CVE-2020-6932: Improper Neutralization of Escape, Meta, or Control Sequences

An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to potentially read arbitrary files and run arbitrary executables in the context of the web server...

Arbitrary file read vulnerability in zblogphp 1.5.1

Z-Blog is an open source program based on Asp and PHP platforms. Z-Blog background arbitrary file reading vulnerability, attackers can use the vulnerability to obtain the site source code...

Arbitrary File Read Vulnerability in CLTPHP Open Source Edition

CLTPHP content management system is an efficient site-building PHP content management system , but also an open source CMS system . CLTPHP open source version of the existence of arbitrary file reading vulnerability , an attacker can exploit the vulnerability to read any file on the server...

Qingdao Yiqi Tianchuang Management Consulting Co., Ltd. Zendo open source version of the existence of arbitrary file read vulnerability

Zendo Open Source Edition is a research and development project management software. Qingdao Yiqi Tianchuang Management Consulting Co., Ltd Zendo Open Source Edition There is an arbitrary file read vulnerability, which can be exploited by attackers to obtain sensitive information...

FreeBSD : Gitlab -- Multiple Vulnerabilities (a003b74f-d7b3-11ea-9df1-001b217b3468)

Gitlab reports : Arbitrary File Read when Moving an Issue Memory Exhaustion via Excessive Logging of Invite Email Error Denial of Service Through Project Import Feature User Controlled Git Configuration Settings Resulting in SSRF Stored XSS in Issue Reference Number Tooltip Stored XSS in Issues...

Gitlab -- Multiple Vulnerabilities

Gitlab reports: Arbitrary File Read when Moving an Issue Memory Exhaustion via Excessive Logging of Invite Email Error Denial of Service Through Project Import Feature User Controlled Git Configuration Settings Resulting in SSRF Stored XSS in Issue Reference Number Tooltip Stored XSS in Issues Li...

CVE-2020-8222

A path traversal vulnerability exists in Pulse Connect Secure 9.1R8 that allowed an authenticated attacker via the administrator web interface to perform an arbitrary file reading vulnerability through Meeting...

CVE-2020-8222

A path traversal vulnerability exists in Pulse Connect Secure 9.1R8 that allowed an authenticated attacker via the administrator web interface to perform an arbitrary file reading vulnerability through Meeting...

CVE-2020-8221: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability exists in Pulse Connect Secure 9.1R8 which allows an authenticated attacker to read arbitrary files via the administrator web interface...

KonaWiki Path Traversal Vulnerability

KonaWiki is a lightweight Wiki system. The system is primarily used for writing manuscripts, keeping minutes and memos, etc. A path traversal vulnerability exists in KonaWiki 3.1.0 and earlier versions. A remote attacker can exploit this vulnerability to read arbitrary files...

CVE-2020-5614

Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2020-5614: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors...

Rocket.Chat: Arbitrary file read in Rocket.Chat-Desktop

Description: Rocket.Chat-Desktop is vulnerable to arbitrary file read. Releases Affected: Rocket.Chat-Desktop-Client: v3.0.0-develop Steps To Reproduce by setting up a malicious server: 1. Go to Administration » Layout » Custom Scripts » Custom Script for Logged In Users 1. Insert the following...

CVE-2020-7687

This affects all versions of package fast-http. There is no path sanitization in the path provided at fs.readFile in index.js...

CVE-2020-7683: Improper Limitation of a Pathname to a Restricted Directory

This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function...

U.S. Dept Of Defense: Path traversal on https://███ allows arbitrary file read (CVE-2020-3452)

Summary: According to Cisco: A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files on a targete...