Lucene search
+L

13974 matches found

RedHat Linux
RedHat Linux
•added 2020/06/10 7:23 p.m.•22 views

Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371

A flaw was found in Eclipse Mojarra before version 2.3.14, where it is vulnerable to a path traversal flaw via the loc parameter or the con parameter. An attacker could exploit this flaw to read arbitrary files...

7.5CVSS7AI score0.10124EPSS
SaveExploits1References9
CNVD
CNVD
•added 2020/06/10 12:00 a.m.•9 views

EyouCms has an arbitrary file read vulnerability

EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. EyouCms has an arbitrary file reading vulnerability, attackers can use this vulnerability to obtain sensitive information...

6.9AI score
SaveExploits0
zdt
zdt
•added 2020/06/04 12:00 a.m.•55 views

SnapGear Management Console SG560 3.1.5 - Arbitrary File Read Vulnerability

Exploit for hardware platform in category web applications Title: Secure Computing SnapGear Management Console SG560 3.1.5 - Arbitrary File Read Author:LiquidWorm Vendor: http://www.securecomputing.com CVE: N/A Secure Computing SnapGear Management Console SG560 v3.1.5 Arbitrary File Read/Write...

0.2AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2020/06/04 12:00 a.m.•207 views

Secure Computing SnapGear Management Console SG560 3.1.5 Arbitrary File Read / Write

Secure Computing SnapGear Management Console SG560 v3.1.5 Arbitrary File Read/Write Vendor: Secure Computing Corp. Product web page: http://www.securecomputing.com Affected version: 3.1.5u1 Summary: The SG gateway appliance range provides Internet security and privacy of communications for small...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2020/06/04 12:00 a.m.•422 views

Secure Computing SnapGear Management Console SG560 3.1.5 - Arbitrary File Read

Title: Secure Computing SnapGear Management Console SG560 3.1.5 - Arbitrary File Read Author:LiquidWorm Date: 2020-06-04 Vendor: http://www.securecomputing.com CVE: N/A Secure Computing SnapGear Management Console SG560 v3.1.5 Arbitrary File Read/Write Vendor: Secure Computing Corp. Product web...

5.3AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2020/06/03 10:02 p.m.•67 views

Arbitrary File Read in Snyk Broker

All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal...

6.5CVSS4.9AI score0.01685EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2020/06/03 10:02 p.m.•34 views

GHSA-X7M2-6G99-84W5 Arbitrary File Read in Snyk Broker

All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal...

6.5CVSS6.5AI score0.01685EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2020/06/03 10:02 p.m.•76 views

Arbitrary File Read in Snyk Broker

All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network by creating symlinks to match whitelisted paths...

6.5CVSS4.4AI score0.0113EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2020/06/03 10:02 p.m.•44 views

GHSA-4VJ3-F849-5R48 Arbitrary File Read in Snyk Broker

All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network by creating symlinks to match whitelisted paths...

6.5CVSS6.5AI score0.0113EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2020/06/03 10:02 p.m.•69 views

Arbitrary File Read in Snyk Broker

All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users who have access to Snyk's internal network by appending the URL with a fragment identifier and a whitelisted path e.g. package.json...

6.5CVSS4.2AI score0.0113EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2020/06/03 10:02 p.m.•36 views

GHSA-9XV2-548X-5H79 Arbitrary File Read in Snyk Broker

All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users who have access to Snyk's internal network by appending the URL with a fragment identifier and a whitelisted path e.g. package.json...

6.5CVSS6.5AI score0.0113EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2020/06/03 10:02 p.m.•70 views

Arbitrary File Read in Snyk Broker

All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read. It allows arbitrary file reads to users with access to Snyk's internal network of any files ending in the following extensions: yaml, yml or json...

6.5CVSS3.7AI score0.0113EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2020/06/03 10:02 p.m.•51 views

GHSA-2FMP-7XWF-WVWR Arbitrary File Read in Snyk Broker

All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read. It allows arbitrary file reads to users with access to Snyk's internal network of any files ending in the following extensions: yaml, yml or json...

6.5CVSS6.4AI score0.0113EPSS
SaveExploits0References3
OSV
OSV
•added 2020/06/03 10:02 p.m.•37 views

GHSA-45HW-29X7-9X95 Arbitrary File Read in Snyk Broker

All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read. It allows partial file reads for users who have access to Snyk's internal network via patch history from GitHub Commits API...

4.3CVSS4.3AI score0.01115EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2020/06/03 10:02 p.m.•76 views

Arbitrary File Read in Snyk Broker

All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read. It allows partial file reads for users who have access to Snyk's internal network via patch history from GitHub Commits API...

4.3CVSS4.1AI score0.01115EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2020/06/03 12:00 a.m.•6 views

PT-2020-2681

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description The issue is related to a vulnerability in the web-based user interface of Cisco IOS XE Software, which could allow an authenticated, remote attacker with administrative...

6.8CVSS0.01911EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/03 12:00 a.m.•8 views

CVE-2020-3223: Improper Link Resolution Before File Access

A vulnerability in the web-based user interface web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with administrative privileges to read arbitrary files on the underlying filesystem of the device. The vulnerability is due to insufficient file scope limiting. An attacke...

6.8CVSS6.1AI score0.01911EPSS
SaveExploits0References3
CNVD
CNVD
•added 2020/06/02 12:00 a.m.•8 views

Arbitrary File Read Vulnerability in CloudCare Inspection Information System

Guangzhou Daan Clinical Laboratory Center Co., Ltd. is a high-tech enterprise group engaged in professional medical services, public health services and related technical support services. YunKang test information system there are arbitrary file reading vulnerability, an attacker can exploit the...

6.7AI score
SaveExploits0
Veracode
Veracode
•added 2020/06/01 7:14 a.m.•26 views

Arbitrary File Read

snyk-broker is vulnerable to arbitrary file read. Users with access to Snyk's internal network are able to read arbitrary files by renaming the files to match whitelisted paths...

6.5CVSS3.6AI score0.01685EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
•added 2020/06/01 5:16 a.m.•30 views

Arbitrary File Read

snyk-broker is vulnerable to arbitrary file read. The vulnerability exists as it does not properly restrict the values of the request headers...

4.3CVSS2.9AI score0.01115EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder