CVE-2019-8952

A Path Traversal vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote authorized user to access arbitrary files on the system via the network interface. Affected hardware products: Bosch DIVAR IP 2000 vulnerable...

Directory traversal

Directory traversal vulnerability in pageflipbook.php script from index.php in Page Flip Book plugin for WordPress wppageflip allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pageflipbooklanguage parameter...

NetNumber Titan ENUM/DNS/NP 7.9.1 Bypass / Traversal

Exploit Title: NetNumber Titan ENUM/DNS/NP - Path Traversal - Authorization Bypass Google Dork: N/A Date: 4/29/2019 Exploit Author: MobileNetworkSecurity Vendor Homepage: https://www.netnumber.com/products/data Software Link: N/A Version: Titan Master 7.9.1 Tested on: Linux CVE : N/A Type: WEBAPP...

Ubuntu 16.04 LTS / 18.04 LTS : Ghostscript vulnerability (USN-3970-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3970-1 advisory. It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a speciall...

USN-3970-1 ghostscript vulnerability

It was discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary files, execute arbitrary code, or cause a denial of service...

NetNumber Titan ENUMDNSNP 7.9.1 - Path Traversal Authorization Bypass

NetNumber Titan ENUMDNSNP 7.9.1 - Path Traversal Authorization Bypass Exploit Title: NetNumber Titan ENUM/DNS/NP - Path Traversal - Authorization Bypass Google Dork: N/A Date: 4/29/2019 Exploit Author: MobileNetworkSecurity Vendor Homepage: https://www.netnumber.com/products/data Software Link: N...

RHEL 8 : openwsman (RHSA-2019:0972)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0972 advisory. Openwsman is a project intended to provide an open source implementation of the Web Services Management specification WS-Management and to expose...

Debian: Security Advisory (DLA-1774-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Path Traversal

Red Hat JBoss Enterprise Application is vulnerable to path traversal attacks. The attacks are possible because the application fails to sufficiently sanitize user-supplied input. Remote attackers may use a specially crafted request with directory-traversal sequences to read arbitrary files...

Information Disclosure

ghostscript is vulnerable to information disclosure vulnerability. Remote attackers could bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use of the .libfile operator in a crafted postscript document and access sensitive information...

Information Disclosure

cups is vulnerable to information disclosure. The vulnerability exists as the web interface allows local users in the Ip group to read arbitrary files through symlinks. This vulnerability exists through an incomplete fix for CVE-2014-3537...

Information Disclosure

cups is vulnerable to information disclosure. The vulnerability exists as the web interface allows local users in the lp group to read arbitrary files using symlinks...

Information Disclosure

cups is vulnerable to information disclosure. The vulnerability exists as cups allows local users to read arbitrary files through symlinks...

Symlink Attack

ibutils is vulnerable to symlink attack. A flaw was found in the way ibutils handled temporary files. A local attacker could use this flaw to cause arbitrary files to be overwritten as the root user via a symbolic link attack...

Directory Traversal

jenkins is vulnerable to directory traversal. The vulnerability exists as remotely authenticated users with Overall/READ permission can read arbitrary files...

Denial Of Service (DoS)

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. It was discovered that the PHP XSL extension did not restrict the file writing capability of libxslt. A remote attacker could use this flaw to create or overwrite an arbitrary file that is writable by the user...

CVE-2019-10309

Jenkins Self-Organizing Swarm Plug-in Modules Plugin clients that use UDP broadcasts to discover Jenkins masters do not prevent XML External Entity processing when processing the responses, allowing unauthorized attackers on the same network to read arbitrary files from Swarm clients...

Security Bulletin: A vulnerability affects the IBM FlashSystem V840

Summary There is a vulnerability to which the FlashSystem™ V840 is susceptible. An exploit of this vulnerability could make the system subject to an attack where an unauthenticated user could download arbitrary files form the operating system. Vulnerability Details CVEID: CVE-2018-1775 DESCRIPTIO...

JC6 Collaborative OA platform has xml entity injection vulnerability

JC6 collaborative OA platform is a collaborative office platform based on the J2EE framework. JC6 collaborative OA platform xml entity injection vulnerability, an attacker can use the vulnerability to read arbitrary files...

CVE-2019-11538

In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1, an NFS problem could allow an authenticated attacker to access the contents of arbitrary files on the affected device...