Arbitrary File Read

gitlab is vulnerable to Arbitrary File Read. The vulnerability exists due to the incorrect way of handling files, which allows an attacker to read content of the file when importing to the groups...

CVE-2023-32635

XBRL data create application version 7.0 and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XBRL file, arbitrary files on the system may be read by an attacker...

JVN#44726469: Improper restriction of XML external entity references (XXE) in XBRL data create application

XBRL data create application provided by Financial Services Agency improperly restricts XML external entity references XXE CWE-611. Impact By processing a specially crafted XBRL file, arbitrary files on the system may be read by an attacker. Solution Update the Software Update the software to the...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick

auto-cve-2022-44268 Automating expl...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick

auto-cve-2022-44268 Automating expl...

rswag vulnerable to arbitrary JSON and YAML file read via directory traversal

rswag before 2.10.1 allows remote attackers to read arbitrary JSON and YAML files via directory traversal, because rswag-api can expose a file that is not the OpenAPI or Swagger specification file of a project...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick

It is an exploit module targeting Apache Log4j. The target produ...

rswag 路径遍历漏洞

rswag is an API from the rswag community that seamlessly adds Swagger to Rails-based projects. A security vulnerability exists in versions of rswag prior to 2.10.1, which stems from the fact that the rswag-api can expose a file that is not a project's OpenAPI or Swagger specification file, leadin...

Path traversal

Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from the underlying file system via web service. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions...

Jenkins MathWorks Polyspace Plugin vulnerable to arbitrary file read

Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier does not restrict the path of the attached files in Polyspace Notification post-build step. This allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file system...

GHSA-Q6CQ-8R4J-6RJ5 Jenkins MathWorks Polyspace Plugin vulnerable to arbitrary file read

Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier does not restrict the path of the attached files in Polyspace Notification post-build step. This allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file system...

Arbitrary File Read Vulnerability in Mobile System Management at UFIDA Network Technology Co.

UFIDA Network Technology Co., Ltd. is a leading global provider of enterprise cloud services and software. An arbitrary file read vulnerability exists in the mobile system management of UFIDA Network Technologies, Inc. that can be exploited by an attacker to read arbitrary files...

Arbitrary File Read

MechanicalSoup is vulnerable to Arbitrary File Read. The vulnerability is due to improper file path sanitization which allows an attacker to read arbitrary files on the web server using the tag inside an HTML form...

CVE-2023-24487

Arbitrary file read in Citrix ADC and Citrix Gateway...

CVE-2023-24487

Arbitrary file read in Citrix ADC and Citrix Gateway...

Design/Logic Flaw

Arbitrary file read in Citrix ADC and Citrix Gateway?...

CVE-2023-24487 Arbitrary file read

Arbitrary file read in Citrix ADC and Citrix Gateway...

CVE-2023-24487 Arbitrary file read

Arbitrary file read in Citrix ADC and Citrix Gateway...

CVE-2023-24487

CVE-2023-24487 describes an Arbitrary file read in Citrix ADC and Citrix Gateway. The vulnerability originates from access to NSIP/SNIP via the management interface and affects: Citrix ADC/Gateway 12.1 before 12.1-65.35, 12.1-FIPS before 12.1-55.296, 13.0 before 13.0-90.11, and 13.1 before 13.1-4...

CVE-2023-23547

A directory traversal vulnerability exists in the luci2-io file-export mib functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to arbitrary file read. An attacker can send a network request to trigger this vulnerability...