Firefox < 39.0.3 PDF Reader Arbitrary File Access

The version of Firefox installed on the remote Windows host is prior to 39.0.3. It is, therefore, affected by a vulnerability in the same origin policy in which an attacker can inject script code into a non-privileged part of browser's built-in PDF reader, resulting in gaining access to sensitive...

Firefox ESR < 38.1.1 PDF Reader Arbitrary File Access (Mac OS X)

The version of Firefox ESR installed on the remote Mac OS X host is prior to 38.1.1. It is, therefore, affected by a vulnerability in the same origin policy in which an attacker can inject script code into a non-privileged part of browser's built-in PDF reader, resulting in gaining access to...

The vulnerability of the Tivoli Storage Manager FastBack data management program allows a hacker to read and execute arbitrary files.

The vulnerability of the Tivoli Storage Manager FastBack data management program exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to read and execute arbitrary files by sending specially crafted TCP packets...

S3Bubble <= 0.7 - Directory Traversal leading to Arbitrary File Access

The last time it was checked the plugin was still affected and had been closed...

Zarafa Collaboration Platform Arbitrary File Access Vulnerability

Zarafa Collaboration Platform is prone to an arbitrary file access vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Authorization Bypass Vulnerability in RG-NBR Series Gateways of Riptide Networks

Ruijie Networks, is a leading brand of network solutions in China. As a national enterprise, Ruijie Networks adheres to the road of independent research and development, and opens up a unique avenue of innovation in the highly competitive network equipment market. The vendors represented by Ruiji...

Nakid CMS Local File Inclusion Vulnerability

Nakid CMS is an open source content management system CMS based on PHP and CodeIgniter. Nakid CMS suffers from a local file inclusion vulnerability that allows an attacker to read arbitrary files...

PHP null pointer has multiple security restriction bypass vulnerabilities

PHP is a general-purpose scripting language. A security vulnerability exists in PHP due to a missing path in multiple extensions or null byte checking of the path parameter of certain functions. Allowing remote attackers to exploit this vulnerability could allow PHP scripts to access arbitrary...

IBM Marketing Operations Catalog Traversal Vulnerability

IBM Marketing Operations formerly known as IBM Unica Marketing Operations is a suite of marketing management software from the American company IBM. The software supports streamlining of production processes, tracking of budgets and expenditures, and improved teamwork. A directory traversal...

The vulnerability of the FTP server ProFTPD, which allows a remote intruder to gain access to protected information

The vulnerability in the mod-copy module of the ProFTPD FTP server may allow a malicious actor to read and write arbitrary files using CPRF and CTPO commands...

WSO2 Identity Server SAML Authentication XXE Injection Vulnerability

WSO2 Identity Server is an open source identity services , support for Information Cards, OpenID and XACML. WSO2 Identity Server SAML authentication interface XXE injection vulnerability allows remote attackers to submit special XML data to access arbitrary files...

PT-2015-1244

Name of the Vulnerable Software and Affected Versions ProFTPD version 1.3.5 Description The issue allows remote attackers to read and write to arbitrary files. This is achieved via the site cpfr and site cpto commands, which are part of the mod copy module in the ProFTPD FTP server. Recommendatio...

WordPress Myflash Plugin - Arbitrary File Access

This plugin is prone to myextractXML.php path parameter arbitrary file access vulnerability. Solution Upgrade the plugin...

WordPress eShop Magic Plugin <= 0.1 - Local File Inclusion

This plugin is prone to eshop-magic/download.php file parameter traversal arbitrary file access vulnerability. It allows attackers to disclose sensitive information. Solution Update the plugin...

WordPress Gallery Plugin <= 3.8.3 - Arbitrary File Access

This plugin is prone to an arbitrary file access in gallery-plugin.php filename1 parameter. It allows attackers to read arbitrary files. Solution Upgrade plugin...

WordPress Online Store Plugin <= 1.3.1 - Arbitrary File Access

This plugin is prone to an index.php multiple parameter traversal arbitrary file access vulnerability. Solution Update the plugin...

SQL Buddy /sqlbuddy/ page parameter remote directory traversal vulnerability

SQL Buddy is a nice lightweight ajax database management tool. SQL Buddy fails to properly filter user input, allowing remote attackers to exploit a vulnerability to access arbitrary files via the 'page' parameter...

Google Android Directory Traversal Vulnerability

Android is an operating system based on the Linux open kernel and is a mobile operating system announced on November 5, 2007 by Google Inc. Android 4.4 and other versions suffer from an MTP path traversal vulnerability in their implementation. An attacker can exploit this vulnerability to access ...

Unspecified XXE Injection Vulnerability in IBM InfoSphere MDM Reference Data Management

IBM InfoSphere MDM Reference Data Management provides a range of capabilities essential for seamlessly managing reference data in the information world across different business domains, including comprehensive authoring and lifecycle management capabilities, a version control model, role-based...

MGASA-2015-0138 Updated batik packages fix security vulnerabilities

Updated batik packages fix security vulnerability: Nicolas Gregoire and Kevin Schaller discovered that Batik would load XML external entities by default. If a user or automated system were tricked into opening a specially crafted SVG file, an attacker could possibly obtain access to arbitrary fil...