SICUNET Access Controller Multiple Vulnerabilities

SICUNET Access Controller is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

JVN#73083905: Multiple vulnerabilities in WBCE CMS

WBCE CMS provided by WBCE Team is an open-source Contents Management System CMS. WBCE CMS contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2017-2118 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...

Kodi Local File Inclusion Vulnerability

Kodi formerly XBMC is a free and open source media player software application developed by the XBMC Foundation.Chorus is the web interface used to control and interact with Kodi. Kodi suffers from a local file inclusion vulnerability that stems from insufficient validation of user input performe...

Hanwha Techwin Smart Security Manager Elevation of Privilege Vulnerability

Hanwha Techwin Smart Security Manager is the software management platform. Hanwha Techwin Smart Security Manager has an elevation of privilege vulnerability in the ActiveMQ Broker service that could allow an attacker to access arbitrary files on the server...

Format string

The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via string quotes and S-expressions in the bootloader configuration file...

DEBIAN-CVE-2016-7169

Directory traversal vulnerability in the FileUploadUpgrader class in wp-admin/includes/class-file-upload-upgrader.php in the upgrade package uploader in WordPress before 4.6.1 allows remote authenticated users to access arbitrary files via a crafted urlholder parameter...

Arbitrary File Access

guard-livereload is vulnerable to arbitrary file access. Anyone who can connect to a port can read files that are available to the user running the livereload server...

Multiple Delta Electronics Products Arbitrary File Access Vulnerability

Delta Electronics WPLSoft and others are software control platforms used by Delta Electronics to edit the Delta DVP series of programmable logic controllers PLCs. An arbitrary file access vulnerability exists in multiple Delta Electronics products. An attacker could exploit the vulnerability to...

UBUNTU-CVE-2016-9565

MagpieRSS, as used in the front-end component in Nagios Core before 4.2.2 might allow remote attackers to read or write to arbitrary files by spoofing a crafted response from the Nagios RSS feed server. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4796...

CVE-2016-9208

A vulnerability in the File Management Utility, the Download File form, and the Serviceability application of Cisco Emergency Responder could allow an authenticated, remote attacker to access files in arbitrary locations on the file system of an affected device. More Information: CSCva98951...

PHP FormMail Generator Security Bypass Vulnerability (CNVD-2016-12387)

PHP FormMail Generator is a suite of PHP applications for generating standard web forms for inclusion in PHP or WordPress websites. A security bypass vulnerability exists in PHP FormMail Generator. The vulnerability stems from the program incorrectly detecting a folder directory entered by the...

Red Hat Drools Directory Traversal Vulnerability

Red Hat Drools is the United States Red Hat Red Hat, Inc. of a set of open source based on the RETE algorithm business rules management system BRMS solution. The program provides a core business rules engine BRE, Web authoring and rules management applications Drools Workbench and for the core...

XXE External Entity Injection Vulnerability in Hikvision Elisa Live IP camera

Hangzhou Hikvision Digital Technology Co. Elisa Live IP camera is a network camera. Hikvision Elisa Live IP camera suffers from XXE external entity injection vulnerability. An attacker can exploit the vulnerability to obtain arbitrary files on a website, and in severe cases, obtain server control...

DWebPro 8.4.2 Local File Inclusion Vulnerability

DWebPro is a dynamic web site software package for distribution on CD/DVD or USB drives. A local file inclusion vulnerability exists in the start parameter of DWebPro, which allows an attacker to access arbitrary files and, when browsing to an executable file, execute the file with system...

CVE-2016-7560

CVE-2016-7560 affects Fortinet FortiWLC: the rsyncd server in FortiWLC versions up to 8.2-4-0 uses a hardcoded rsync account, enabling remote attackers to read or write arbitrary files via unspecified vectors. This vulnerability stems from the hardcoded credential/account in the rsync service, wi...

IBM Spectrum Control and IBM Storage Insights Catalog Traversal Vulnerability

IBM Spectrum Control and IBM Storage Insights are both storage resource management software from IBM USA. A directory traversal vulnerability exists in IBM Spectrum Control versions 5.2.8 through 5.2.10.1 and IBM Storage Insights. An attacker can exploit this vulnerability by sending a URL reques...

Directory Traversal Vulnerability in QEMU File Handling

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A directory traversal vulnerability exists in QEMU. As the program fails to adequately filter user-submitted input. An attacker can leverage the directory traversal...

Moodle 2.4.x < 2.4.1 Multiple Vulnerabilities

Binary data 9414.prm...

Microsoft .NET Framework Information Disclosure Vulnerability (CNVD-2016-04935)

Microsoft .NET Framework is a comprehensive and consistent programming model developed by Microsoft Corporation USA and a development platform for building Windows, Windows Store, Windows Phone, Windows Server and Microsoft Azure Windows Store, Windows Phone, Windows Server, and Microsoft Azure...

The vulnerability of the antivirus software Internet Security allows a hacker to read arbitrary files.

The vulnerability of the antivirus software Internet Security is related to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files...