Maxum Development Rumpus Path Traversal Vulnerability

Maxum Development Rumpus is a suite of file transfer server software from Maxum Development in the United States. A security vulnerability exists in Maxum Development Rumpus versions prior to 8.2.12 macOS. An attacker can exploit the vulnerability to access arbitrary files on the server...

openSUSE Security Update : MozillaFirefox (openSUSE-2020-621)

This update for MozillaFirefox fixes the following issues : Update to version 68.8.0 ESR bsc1171186 : - CVE-2020-12387: Use-after-free during worker shutdown - CVE-2020-12388: Sandbox escape with improperly guarded Access Tokens - CVE-2020-12389: Sandbox escape with improperly separated process...

OPENSUSE-SU-2020:0621-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to version 68.8.0 ESR bsc1171186: - CVE-2020-12387: Use-after-free during worker shutdown - CVE-2020-12388: Sandbox escape with improperly guarded Access Tokens - CVE-2020-12389: Sandbox escape with improperly separated process typ...

Critical: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 8 : firefox (RHSA-2020:2033)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2033 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

CVE-2017-18713

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D7800 before 1.0.1.28, R6700 before 1.0.1.36, R6900 before 1.0.1.34, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR4300v2 before 1.0.0.48, and WNDR4500v3 before 1.0.0.4...

CVE-2020-7008

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not properly verified before use, which may allow an attacker to read arbitrary files from local resources...

Directory Traversal

mutt is vulnerable to directory traversal. The IMAP header caching mishandles the mailbox name parameter and allows ../ characters to be included. This results in arbitrary file access...

Laminar Research X-Plane OS Command Injection Vulnerability

Laminar Research X-Plane is a flight simulator from the American company Laminar Research. An operating system command injection vulnerability exists in Laminar Research X-Plane version 11.41 and prior versions, which stems from the program failing to perform proper path checking. The vulnerabili...

CVE-2019-19606

X-Plane before 11.41 has multiple improper path validations that could allow reading and writing files from/to arbitrary paths or a leak of OS credentials to a remote system via crafted network packets. This could be used to execute arbitrary commands on the system...

SAP NetWeaver UDDI Server Path Traversal Vulnerability

SAP NetWeaver UDDI Server is a UDDI Unified Description, Discovery and Integration directory server from SAP. SAP NetWeaver UDDI Server suffers from a path traversal vulnerability that stems from the program not adequately validating path information submitted by the user. An attacker could explo...

JFrog Artifactory FreeMarker Template Injection Vulnerability

Artifactory is a full-featured component manager from JFrog. A template injection vulnerability exists in Artifactory FreeMarker, which can be exploited by an attacker to An attacker can use this vulnerability to read or write arbitrary files and execute code on an instance of Artifactory...

Siemens SiNVR 3 Path Traversal Vulnerability

SiNVR 3 is a video management platform.Central Control Server CCS is the central control server and Video Server is the video server. SiNVR 3 has a path traversal vulnerability in its implementation that can be exploited by a remote attacker to download and access arbitrary files from the server...

PT-2020-2346 · Siemens · Sinvr/Sivms Video Server

Name of the Vulnerable Software and Affected Versions: SiNVR/SiVMS Video Server versions prior to V5.0.0 Description: A path traversal vulnerability has been identified in the FTP services of the SiVMS/SiNVR Video Server. This vulnerability could allow an authenticated remote attacker to access a...

PT-2020-1993 · Cisco · Cisco Fxos

Name of the Vulnerable Software and Affected Versions: Cisco FXOS Software affected versions not specified Description: The issue is related to insufficient input validation in the CLI of Cisco FXOS Software, allowing an authenticated, local attacker to read or write arbitrary files on the...

Directory traversal vulnerability in ad***_te***.php file of PiPiCMS PiPi Movie & TV Collection program

PiPiCMS PiPi Movie and TV Collection Program is a movie and TV station building program based on PHP+MySQL. A directory traversal vulnerability exists in the adte.php file of PiPiCMS PiPi Movie and TV Collection Program. An attacker can use the vulnerability to access the directory of any website...

CVE-2020-3937

SQL Injection in SysJust Syuan-Gu-Da-Shih, versions before 20191223, allowing attackers to perform unwanted SQL queries and access arbitrary file in the database...

CVE-2020-3927

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API parameter...

CVE-2020-3926

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API parameter...

CVE-2020-3926

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API parameter...