The vulnerability of the Apport error registration service, related to errors in the code, allows a violator to read arbitrary files.

The vulnerability of the Apport error logging service is related to errors in the code. Exploiting this vulnerability can allow an attacker to read arbitrary files through specially crafted D-Bus calls...

Add From Server <= 3.3.3 - Authenticated Path Traversal to Arbitrary File Access

An authenticated attacker with low permission can read arbitrary files on server using Path Traversal. The plugin author states that this is by design and that the plugin should not be used. Please refer to the references. http://example.com/wp-admin/upload.php?page=add-from-server&adirectory=/...

Add From Server <= 3.3.3 - Authenticated Path Traversal to Arbitrary File Access

An authenticated attacker with low permission can read arbitrary files on server using Path Traversal. The plugin author states that this is by design and that the plugin should not be used. Please refer to the references. PoC http://example.com/wp-admin/upload.php?page=add-from-server=/...

Beijing Tongda Science and Technology Co., Ltd. Tongda OA has a logic flaw vulnerability

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software developed by Beijing Tongda Science and Technology Co. Ltd. is a collaborative office automation software developed by the company. Ltd. There is a logic flaw vulnerability in Tongda OA. An...

tgstation-server Resource Management Error Vulnerability

tgstation-server is a toolset for managing production BYOND servers. A resource management error vulnerability exists in tgstation-server versions 4.4.0 and 4.4.1. The vulnerability stems from the mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or...

rConfig Directory Traversal Vulnerability

rConfig is an open source network configuration management utility . A directory traversal vulnerability exists in rConfig version 3.9.5, which can be exploited to view arbitrary files on a system by sending a request to the ajaxGetFileByPath.php script with a 'path' parameter with the sequence...

The vulnerability of the automated information system “Web-Torghi KS” arises from the lack of measures taken to protect the structure of the web page. This allows attackers to read arbitrary files on the AIIS server.

The vulnerability of the automated information system “Web-Torghi KS” is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to read arbitrary files on the AIIS server using a specially created...

CVE-2020-5907

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, an authorized user provided with access only to the TMOS Shell tmsh may be able to conduct arbitrary file read/writes via the built-in sftp functionality...

CVE-2020-14975

The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to delete, move, or copy arbitrary files via IOCTL code 0x222124...

Directory Traversal

Overview rollup-plugin-serve is a rollup plugin to serve the bundle. Affected versions of this package are vulnerable to Directory Traversal. There is no path sanitization in readFile operation. PoC by JHU System Security Lab Step 1: start a server var server = require"rollup-plugin-serve"; serve...

Arbitrary File Read And Write

SpawningKit in passenger is vulnerable to arbitrary file read and write. The vulnerability exiss as it was possible to read or write a file outside the work directory through symbolic links...

Cisco IOS XE Backlink Vulnerability

Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. A backlink vulnerability exists in the Web UI in Cisco IOS XE Software. An attacker could exploit this vulnerability to read arbitrary files on the underlying file system...

CVE-2020-5410

CVE-2020-5410 affects VMware/Tanzu Spring Cloud Config Server. Versions 2.2.x before 2.2.3 and 2.1.x before 2.1.9 (and older unsupported) are vulnerable to a directory-traversal where a crafted URL can cause the server to serve arbitrary configuration files. Root cause: inadequate validation in t...

snyk-broker information disclosure vulnerability (CNVD-2020-53548)

snyk-broker is a proxy program for access between snyk.io and Git repositories. An information disclosure vulnerability exists in snyk-broker versions prior to 4.80.0. An attacker can exploit this vulnerability by creating symbolic links matching whitelisted paths to read arbitrary files on the...

CentOS: Security Advisory for firefox (CESA-2020:2036)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Maxum Development Rumpus Path Traversal Vulnerability

Maxum Development Rumpus is a suite of file transfer server software from Maxum Development in the United States. A security vulnerability exists in Maxum Development Rumpus versions prior to 8.2.12 macOS. An attacker can exploit the vulnerability to access arbitrary files on the server...

openSUSE Security Update : MozillaFirefox (openSUSE-2020-621)

This update for MozillaFirefox fixes the following issues : Update to version 68.8.0 ESR bsc1171186 : - CVE-2020-12387: Use-after-free during worker shutdown - CVE-2020-12388: Sandbox escape with improperly guarded Access Tokens - CVE-2020-12389: Sandbox escape with improperly separated process...

OPENSUSE-SU-2020:0621-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to version 68.8.0 ESR bsc1171186: - CVE-2020-12387: Use-after-free during worker shutdown - CVE-2020-12388: Sandbox escape with improperly guarded Access Tokens - CVE-2020-12389: Sandbox escape with improperly separated process typ...

Critical: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

RHEL 8 : firefox (RHSA-2020:2033)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2033 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...