CVE-2022-46945

Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php...

PT-2023-15107 · Nagvis +1 · Nagvis +1

Name of the Vulnerable Software and Affected Versions: Nagvis versions prior to 1.9.34 Description: The issue is related to an arbitrary file read vulnerability. It affects the component /core/classes/NagVisHoverUrl.php. Recommendations: For versions prior to 1.9.34, update to version 1.9.34 or...

CVE-2022-46945

Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php...

CVE-2022-46945

CVE-2022-46945 affects NagVis prior to 1.9.34, allowing an arbitrary file read via /core/classes/NagVisHoverUrl.php. Affected software is NagVis; root cause is improper file read handling in that component. Impact is exposure of sensitive files (confidentiality). Remediation: upgrade to 1.9.34 or...

Exploit for Path Traversal in Gitlab

CVE-2023-2825 - GitLab CE/EE 16.0.0 Arbitrary File Read via Pa...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a malicious actor to read arbitrary files.

The vulnerability in the web interface for managing Cisco Identity Services Engine ISE platforms relates to the implementation of security functions at the client side. Exploiting this vulnerability allows a malicious actor to read arbitrary files using a specially created HTTP request...

Cisco Identity Services Engine Arbitrary File Read Vulnerability

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. An arbitrary file read vulnerability exists in...

Arbitrary File Read

prestashop/prestashop is vulnerable to Arbitrary File Read. An attacker can read arbitrary files when using the SQL function LOADFILE in a SELECT request through the SQL manager...

Arbitrary File Read Vulnerability in M7160DW of Zhuhai Pento Printing Technology Co.

The M7160DW is a black-and-white laser MFP that supports printing, copying and scanning functions with USB, wired network, LAN and WIFI connectivity. The M7160DW of Zhuhai Pento Printing Technology Co., Ltd. suffers from an arbitrary file read vulnerability, which can be exploited by an attacker ...

CVE-2022-36328 Path Traversal Vulnerability leading to an arbitrary file read in Western Digital devices

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could allow an attacker to create arbitrary shares on arbitrary directories and exfiltrate sensitive files, passwords, users and device configurations was discovered in Western Digital My Cloud Home, M...

CVE-2023-32322

Ombi is an open source application which allows users to request specific media from popular self-hosted streaming servers. Versions prior to 4.38.2 contain an arbitrary file read vulnerability where an Ombi administrative user may access files available to the Ombi server process on the host...

Design/Logic Flaw

Ombi is an open source application which allows users to request specific media from popular self-hosted streaming servers. Versions prior to 4.38.2 contain an arbitrary file read vulnerability where an Ombi administrative user may access files available to the Ombi server process on the host...

CVE-2023-32322 Arbitrary file read in Ombi

Ombi is an open source application which allows users to request specific media from popular self-hosted streaming servers. Versions prior to 4.38.2 contain an arbitrary file read vulnerability where an Ombi administrative user may access files available to the Ombi server process on the host...

CVE-2023-32322 Arbitrary file read in Ombi

Ombi is an open source application which allows users to request specific media from popular self-hosted streaming servers. Versions prior to 4.38.2 contain an arbitrary file read vulnerability where an Ombi administrative user may access files available to the Ombi server process on the host...

CVE-2023-32322

CVE-2023-32322 affects Ombi versions prior to 4.38.2. The vulnerability is an arbitrary file read in the SystemControllers.cs endpoints ReadLogFile and Download, caused by improper sanitization of the logFileName parameter used with Path.Combine. Attackers could escape directories with ".." or su...

CVE-2023-32322 Arbitrary file read in Ombi

Ombi is an open source application which allows users to request specific media from popular self-hosted streaming servers. Versions prior to 4.38.2 contain an arbitrary file read vulnerability where an Ombi administrative user may access files available to the Ombi server process on the host...

Cisco Identity Services Engine 输入验证错误漏洞

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. An arbitrary file read vulnerability exists in...

Ombi 路径遍历漏洞

Ombi is the friendly media request tool. A path traversal vulnerability exists in versions prior to Ombi 4.38.2, which stems from the presence of an arbitrary file read vulnerability that could lead to information disclosure...

CVE-2023-20173 Cisco Identity Services Engine XML External Entity Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to read arbitrary files or conduct a server-side request forgery SSRF attack through an affected device. To exploit these vulnerabilities, an attacker...

Cisco Identity Services Engine 代码问题漏洞

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. An XML external entity injection vulnerability...