BEESCMS suffers from an arbitrary file read vulnerability (CNVD-2020-48976)

BEESCMS Enterprise Website Management System - PHP+MYSQL, multi-language system, easy to expand content modules, diversified template styles, simple and powerful template production, professional SEO optimization, easy to operate in the background. BEESCMS has an arbitrary file read vulnerability...

Arbitrary File Read Vulnerability in BEESCMS

BEESCMS is a scalable content management system CMS based on PHP and MySQL. BEESCMS suffers from an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2020-8214

A path traversal vulnerability in servey version 3 allows an attacker to read content of any arbitrary file...

CVE-2020-8214: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in servey version 3 allows an attacker to read content of any arbitrary file...

PT-2020-20028

Name of the Vulnerable Software and Affected Versions servey versions prior to 3.3.2 Description A path traversal issue allows an attacker to read the content of any arbitrary file. Recommendations For servey versions prior to 3.3.2, update to version 3.3.2 or later to resolve the issue...

OurPHP website builder system suffers from an arbitrary file read vulnerability.

OurPHP Aopia website building system is a enterprise + e-commerce marketing website building system. OurPHP website builder system has an arbitrary file reading vulnerability, which can be exploited by attackers to read arbitrary system files...

CVE-2020-3437: Improper Link Resolution Before File Access

A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary files on the underlying filesystem of the device. The vulnerability is due to insufficient file scope limiting. An attacker could exploit this...

Cisco IOS XE Software Web UI Arbitrary File Read Vulnerability (cisco-sa-webui-filerd-HngnDYGk)

According to its self-reported version, Cisco IOS XE Software is affected by an arbitrary file read vulnerability. Please see the included Cisco BID and Cisco Security Advisory for more information. TRUSTED...

PT-2020-3128

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN vManage Software affected versions not specified Description The issue is related to a problem with the web-based management interface of Cisco SD-WAN vManage Software, where an incorrect link resolution before accessing a file ca...

Arbitrary File Read Vulnerability in MTS Transcoding Server of Suzhou Kedar Technology Co.

Ltd. is a provider of video and security products and solutions, dedicated to video conferencing, video surveillance and video application solutions to help various government and enterprise customers to solve visual communication and management challenges. An arbitrary file read vulnerability...

CVE-2020-15050: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2. Remote attackers can read arbitrary files from the server via Directory Traversal...

Arbitrary File Read

electron is vulnerable to arbitrary file read. An attacker is able to read local files by defining unsafe window options on a child window that is opened using window.open...

CVE-2020-4075

In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, arbitrary local file read is possible by defining unsafe window options on a child window opened via window.open. As a workaround, ensure you are calling event.preventDefault on all new-window events where the url or options is not...

CVE-2020-4075 Arbitrary file read via window-open IPC in Electron

In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, arbitrary local file read is possible by defining unsafe window options on a child window opened via window.open. As a workaround, ensure you are calling event.preventDefault on all new-window events where the url or options is not...

GHSA-F9MQ-JPH6-9MHM Arbitrary file read via window-open IPC in Electron

Impact The vulnerability allows arbitrary local file read by defining unsafe window options on a child window opened via window.open. Workarounds Ensure you are calling event.preventDefault on all new-window events where the url or options is not something you expect. Fixed Versions 9.0.0-beta.21...

CVE-2020-5366

Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability. A remote authenticated malicious user with low privileges could potentially exploit this vulnerability by manipulating input parameters to gain unauthorized read access to the arbitrary files...

Appear TV XC5000 and XC5100 Arbitrary File Read (CVE-2018-7539)

A vulnerability exists in Appeartv xc5000 firmware 3.26.217. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

CVE-2020-5907

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, an authorized user provided with access only to the TMOS Shell tmsh may be able to conduct arbitrary file read/writes via the built-in sftp functionality...

PT-2020-18805

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.6.1 through 11.6.5.1 F5 BIG-IP versions 12.1.0 through 12.1.5.1 F5 BIG-IP versions 13.1.0 through 13.1.3.3 F5 BIG-IP versions 14.1.0 through 14.1.2.3 F5 BIG-IP versions 15.0.0 through 15.1.0.3 Description An issue exists...

CVE-2020-14057: Externally Controlled Reference to a Resource in Another Sphere

Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations. This allows attackers to read and write arbitrary local files, allowing an attacker to gain remote code execution in common deployments...