16894 matches found
CVE-2021-41975
TadTools special page is vulnerable to authorization bypass, thus remote attackers can use the specific parameter to delete arbitrary files in the system without logging in...
CVE-2021-41975
TadTools special page is vulnerable to authorization bypass, thus remote attackers can use the specific parameter to delete arbitrary files in the system without logging in...
CVE-2021-25271
A local attacker could read or write arbitrary files with administrator privileges in HitmanPro before version Build 318...
CVE-2021-25271
A local attacker could read or write arbitrary files with administrator privileges in HitmanPro before version Build 318...
Design/Logic Flaw
A local attacker could read or write arbitrary files with administrator privileges in HitmanPro before version Build 318...
TadTools 访问控制错误漏洞
Tad TadTools is a module toolkit for Tad individual developers in Taiwan, China. Tad TadTools is vulnerable to authorization issues that could be exploited by remote attackers to delete arbitrary files on the system using certain parameters without logging in...
CVE-2021-25271
A local attacker could read or write arbitrary files with administrator privileges in HitmanPro before version Build 318...
Improper access control
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote attacker to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 199397...
CVE-2021-21683
The file browser in Jenkins 2.314 and earlier, LTS 2.303.1 and earlier may interpret some paths to files as absolute on Windows, resulting in a path traversal vulnerability allowing attackers with Overall/Read permission Windows controller or Job/Workspace permission Windows agents to obtain the...
Path traversal
The file browser in Jenkins 2.314 and earlier, LTS 2.303.1 and earlier may interpret some paths to files as absolute on Windows, resulting in a path traversal vulnerability allowing attackers with Overall/Read permission Windows controller or Job/Workspace permission Windows agents to obtain the...
Apache HTTP Server Directory Traversal (CVE-2021-41773; CVE-2021-42013)
A directory traversal vulnerability exists in Apache HTTP Server. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...
The vulnerability of the Apache HTTP Server’s web server, related to defects in pathname restriction, allows attackers to execute arbitrary code or read arbitrary files on the target system.
The vulnerability of the Apache HTTP Server is related to deficiencies in pathname restriction. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or read arbitrary files on the target system...
Security Bulletin: XXE Vulnerability in Drools Affects IBM Sterling B2B Integrator (CVE-2014-8125)
Summary IBM Sterling B2B Integrator has addressed the security vulnerability. Vulnerability Details CVEID: CVE-2014-8125 DESCRIPTION: Drools and jBPM could allow a remote attacker to obtain sensitive information, caused by an XML External Entity Injection XXE error within the jBPM runtime. By...
Honeywell Experion PKS和Ace Controllers 路径遍历漏洞
Honeywell Experion PKS and Honeywell Ace Controllers are both products of Honeywell, Inc. Honeywell Experion PKS is a process automation system. Honeywell Ace Controllers are used to execute Honeywell's Control Execution Environment Cee on a server-grade computer platform. Honeywell Ace Controlle...
Remote file inclusion
A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user...
CVE-2021-39433
A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-user...
Path traversal
LCDS LAquis SCADA through 4.3.1.1085 is vulnerable to a control bypass and path traversal. If an attacker can get a victim to load a malicious els project file and use the play feature, then the attacker can bypass a consent popup and write arbitrary files to OS locations where the user has...
CVE-2021-41596
SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the importFile parameter of the RefreshMapping import functionality...
Trend Micro Smart Protection Server Directory Traversal (CVE-2016-6269)
A directory traversal vulnerability exists in Trend Micro Smart Protection Server. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...
Trend Micro Apex One 和 Worry-Free Business Security 权限许可和访问控制问题漏洞
Trend Micro Apex One and Trend Micro Worry-Free Business Security are both products of Trend Micro, Inc.Trend Micro Apex One is a suite of endpoint security software that provides automated threat detection and response.Trend Micro Worry-Free Business Security is an enterprise-class information...