SAP Business Process Automation By Redwood Path Traversal Vulnerability

SAP Business Process Automation BPA By Redwood is a suite of business process automation solutions from SAP, Germany. A directory traversal vulnerability exists in SAP BPA By Redwood versions 9.0 and 9.1, which arises from the program's failure to adequately filter user-submitted path information...

Google Kubernetes Arbitrary File Access Vulnerability

Google Kubernetes is an open source Docker container cluster management system from Google, Inc. The system provides resource scheduling, deployment and operation, service discovery and scaling up and down for containerized applications. A security vulnerability exists in Google Kubernetes. An...

SAP BASIS Directory Traversal Vulnerability

SAP BASIS is a role engaged in sap system administration. Mainly responsible for sap system planning, installation, configuration, management, monitoring, maintenance, tuning, etc.. A security vulnerability exists in the ABAP File Interface in SAP BASIS that stems from the program's failure to...

CVE-2018-5459

An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. An attacker can execute different unauthenticated remote operations because of the CoDeSys Runtime application, which is available via network by default on Port 2455. An attacker...

LibreOffice 6.0.1 - WEBSERVICE Remote Arbitrary File Disclosure

LibreOffice 6.0.1 - WEBSERVICE Remote Arbitrary File Disclosure Vulnerability description CVE-2018-6871 First part LibreOffice supports COM.MICROSOFT.WEBSERVICE function: https://support.office.com/en-us/article/webservice-function-0546a35a-ecc6-4739-aed7-c0b7ce1562c4 The function is required to...

Atlassian Bitbucket Server Path Traversal Vulnerability

Atlassian Bitbucket Server is a Git code hosting solution from Atlassian Australia. The solution is capable of managing and reviewing code with features such as diff view, JIRA integration and build integration. A directory traversal vulnerability exists in the git repository tag rest resource in...

Atlassian Bitbucket Server Path Traversal Vulnerability

Atlassian Bitbucket Server is a Git code hosting solution from Atlassian Australia. The solution is capable of managing and reviewing code with features such as diff view, JIRA integration and build integration. A path traversal vulnerability exists in the repository settings resource in Atlassia...

Jboss EAP undertow AJP connector arbitrary file access vulnerability

Jboss EAP Enterprise Application Platform is a middleware platform for J2EE applications. undertow is one of the Web servers written in Java. the AJP connector is one of the AJP Directed Packet Protocol connector . A security vulnerability exists in the AJP connector of undertow in Jboss EAP...

GLSA-201801-10 : LibXfont, LibXfont2: Arbitrary file access

The remote host is affected by the vulnerability described in GLSA-201801-10 LibXfont, LibXfont2: Arbitrary file access It was discovered that libXfont incorrectly followed symlinks when opening font files. Impact : A local unprivileged user could use this flaw to cause the X server to access...

PYSEC-2018-34

1 core/tests/testmemmap.py, 2 core/tests/testmultiarray.py, 3 f2py/f2py2e.py, and 4 lib/tests/testio.py in NumPy before 1.8.1 allow local users to write to arbitrary files via a symlink attack on a temporary file...

CVE-2017-15550

An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition NVE 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could access arbitrary files on the server file system...

NetGain Systems Enterprise Manager Directory Traversal Vulnerability (CNVD-2018-01228)

NetGain Enterprise Manager is an end-to-end IT infrastructure monitoring platform. NetGain Systems Enterprise Manager suffers from a directory traversal vulnerability in its implementation, which can be exploited by an attacker to access or read arbitrary files...

NetGain Systems Enterprise Manager Directory Traversal Vulnerability (CNVD-2018-01227)

NetGain Enterprise Manager is an end-to-end IT infrastructure monitoring platform. NetGain Systems Enterprise Manager suffers from a directory traversal vulnerability in its implementation, which can be exploited by an attacker to access or read arbitrary files...

Arbitrary File Access

Opencart is vulnerable to arbitrary file access. The library does not properly sanitize the configerrorfilename parameter in the upload/admin/controller/setting/setting.php file, allowing a malicious user to read or delete arbitrary files on the system...

Claymore Dual GPU miner directory traversal vulnerability

Claymore Dual GPU miner is a GPU monitoring software for mining virtual currency computing. A directory traversal vulnerability exists in the remote management interface in Claymore Dual GPU miner version 10.1. A remote attacker could exploit this vulnerability by sending a pathname to minerfile ...

libXfont and libXfont2 Arbitrary File Access Vulnerabilities

libXfont and libXfont2 are both X.Org Foundation X font processing libraries for servers and utilities. A security vulnerability exists in libXfont versions prior to 1.5.4 and libXfont2 versions prior to 2.0.3. A local attacker could exploit this vulnerability to allow the X server to access...

Synology Photo Station Arbitrary File Acquisition Vulnerability

Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. A security vulnerability exists in the picasa.php file in Synology Photo Station versions prior to 6.8.1-3458 and prior to 6.3-2970. A remote attacker can exploit the vulnerability to obtain...

Restlet Framework Arbitrary File Access Vulnerability (CNVD-2017-38241)

Restlet Framework is the United States Restlet a lightweight REST framework . The framework can be assembled into a unified Web site and Web services Web applications . Restlet Framework 2.3.12 before the version has a security vulnerability . Remote attackers can exploit the vulnerability to...

Arbitrary File Access Using A Symlink Attack

salt is vulnerable to arbitrary file access. The vulnerability is possible through a symlink attack which is introduced by the usage of os.tmpnam to generate temporary files...

CVE-2017-14949

Restlet Framework before 2.3.12 allows remote attackers to access arbitrary files via a crafted REST API HTTP request that conducts an XXE attack, because only general external entities not parameter external entities are properly considered. This is related to XmlRepresentation, DOMRepresentatio...