2549 matches found
VMware vRealize Operations 安全漏洞
VMware vRealize Operations is an application from VMware, Inc. A unified, AI-based platform for private, hybrid, and multi-cloud environments that delivers IT operations management on autopilot. A security vulnerability exists in VMware vRealize Operations. An attacker exploiting the vulnerabilit...
CVE-2022-2926
The Download Manager WordPress plugin before 3.2.55 does not validate one of its settings, which could allow high privilege users such as admin to list and read arbitrary files and folders outside of the blog directory...
CVE-2022-2926 Download Manager < 3.2.55 - Admin+ Arbitrary File/Folder Access via Path Traversal
The Download Manager WordPress plugin before 3.2.55 does not validate one of its settings, which could allow high privilege users such as admin to list and read arbitrary files and folders outside of the blog directory...
GHSA-JQ8C-J47C-VVWM Apache SOAP's RPCRouterServlet allows reading of arbitrary files over HTTP
An Improper Restriction of XML External Entity Reference vulnerability in RPCRouterServlet of Apache SOAP allows an attacker to read arbitrary files over HTTP. This issue affects Apache SOAP version 2.2 and later versions. It is unknown whether previous versions are also affected. NOTE: This...
CVE-2022-41235
Jenkins WildFly Deployer Plugin 1.0.2 and earlier implements functionality that allows agent processes to read arbitrary files on the Jenkins controller file system...
CVE-2022-40608
IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the target machine by manipulating the URL with a directory traversal attack. This results in the restore operation gaining access to files which the operator should not have access...
WordPress Contact Form by WPForms plugin <= 1.7.5.3 - Authenticated Arbitrary File Access vulnerability
Authenticated Arbitrary File Access vulnerability discovered by Sybre Waaijer in WordPress Contact Form by WPForms plugin versions = 1.7.5.3. Solution Update the WordPress Contact Form by WPForms plugin to the latest available version at least 1.7.5.5...
CVE-2022-38614
An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and download arbitrary files via modifying the PATH parameter...
SmartVista Cardgen 路径遍历漏洞
SmartVista Cardgen is a complete subsystem for magnetic and smart chip EMV card personalization from SmartVista. A security vulnerability exists in SmartVista Cardgen version v3.28.0, which stems from a problem with the IGB file and OutfileService functionality that allows an attacker to list and...
ShirneCMS 路径遍历漏洞
ShirneCMS is an open source backend management system of Shirne Software Shirnecn. ShirneCMS version 1.2.0 has a path traversal vulnerability. Attackers use this vulnerability to read arbitrary files via /static/ueditor/php/controller.php...
BackupBuddy < 8.7.5 - Unauthenticated Arbitrary File Access
The plugin is affected by a Directory Traversal attack, allowing unauthenticated attackers to access arbitrary files on the web server, starting in version 8.5.8.0. Install BackupBuddy v8.5.8.0 through v8.7.4.1. curl...
The vulnerability of Huawei’s microprogrammed software lies in the fact that operations are performed outside of the buffer in memory, allowing attackers to read or write arbitrary files within the system.
The vulnerability of Huawei’s microprogrammed software is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to read or write arbitrary files in the system by sending a specially crafted request...
The vulnerability of the command-line interface (CLI) of the Kubernetes cluster synchronization software, which connects it to Flux configuration sources, allows a malicious actor to read or write arbitrary files on the system.
The vulnerability of the command-line interface CLI of the Kubernetes cluster synchronization software with respect to configuration sources from Flux is related to an incorrect path name limitation for accessing the restricted directory. Exploiting this vulnerability could allow an attacker to...
PT-2022-19186 · Wwbn · Avideo
Name of the Vulnerable Software and Affected Versions: WWBN AVideo versions 11.6 and dev master commit 3f7c0364 Description: An information disclosure issue exists in the chunkFile functionality, allowing an attacker to read arbitrary files by sending a specially-crafted HTTP request...
WWBN AVideo 安全漏洞
WWBN AVideo is a video platform builder written in PHP by the WWBN team. A security vulnerability exists in WWBN AVideo version 11.6, which originates from an information disclosure vulnerability in the aVideoEncoderReceiveImage function. An attacker can exploit this vulnerability to read arbitra...
CVE-2022-36835
Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to access arbitrary files...
CVE-2022-36835
Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to access arbitrary files...
PT-2022-23639 · Samsung · Samsung Internet Browser
Name of the Vulnerable Software and Affected Versions: Samsung Internet Browser versions prior to 17.0.7.34 Description: The issue allows attackers to access arbitrary files through an Implicit Intent hijacking vulnerability. Recommendations: For versions prior to 17.0.7.34, update to version...
ITPison OMICARD EDM 路径遍历漏洞
ITPison OMICARD EDM is a high-speed email newsletter EDM marketing and distribution system from ITPison China. A security vulnerability exists in ITPison OMICARD EDM versions v5.8 to v6.0. The vulnerability stems from a path traversal in OMICARD EDM's Mail Image Forwarding feature, which can be...
Synology USB Copy 路径遍历漏洞
Synology USB Copy from Synology China helps you copy files between Synology NAS and external USB/SD storage devices. A path traversal vulnerability exists in Synology USB Copy versions prior to 2.2.0-1086, which stems from an improper restriction on the pathname of a restricted directory in the...