SUSE: Security Advisory (SUSE-SU-2022:3321-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NOKIA 1350 OMS 路径遍历漏洞

NOKIA 1350 OMS is an optical management system from the Finnish company Nokia NOKIA. A security vulnerability exists in NOKIA 1350 OMS version R14.2. An attacker can exploit the vulnerability to arbitrarily read files on the file system...

NOKIA 1350 OMS 路径遍历漏洞

NOKIA 1350 OMS is an optical management system from the Finnish company Nokia NOKIA. A security vulnerability exists in NOKIA 1350 OMS version R14.2. An attacker can exploit the vulnerability to arbitrarily read files on the file system...

CVE-2022-2863 WPvivid Backup < 0.9.76 - Admin+ Arbitrary File Read

The Migration, Backup, Staging WordPress plugin before 0.9.76 does not sanitise and validate a parameter before using it to read the content of a file, allowing high privilege users to read any file from the web server via a Traversal attack...

KubeVirt vulnerable to arbitrary file read on host

Impact Users with the permission to create VMIs can construct VMI specs which allow them to read arbitrary files on the host. There are three main attack vectors: 1. Some path fields on the VMI spec were not properly validated and allowed passing in relative paths which would have been mounted in...

Adobe InDesign < 17.4 Arbitrary File Read Vulnerability (APSB22-50)

The version of Adobe InDesign installed on the remote host is prior to 17.4. It is, therefore, affected by an arbitrary file read vulnerability. A remote, unauthenticated attacker can exploit this to read arbitrary files. Note that Nessus has not attempted to exploit these issues but has instead...

KubeVirt vulnerable to arbitrary file read on host

As part of a Kubevirt audit performed by NCC group, a finding dealing with systemic lack of path sanitization which leads to a path traversal was identified. Google tested the exploitability of the paths in the audit report and identified that when combined with another vulnerability one of the...

PT-2022-25496 · League Of Extraordinary Packages +1 · League/Flysystem +1

Name of the Vulnerable Software and Affected Versions: UniSharp laravel-filemanager aka Laravel Filemanager versions prior to 2.6.4 league/flysystem versions prior to 2.0.0 Description: The issue allows download?working dir=%2F.. directory traversal to read arbitrary files. This has been exploite...

BackupBuddy Plugin for WordPress < 8.7.5 Arbitrary File Read

The WordPress BackupBuddy Plugin installed on the remote host is affected by an arbitrary file read vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

CVE-2022-37299

An issue was discovered in Shirne CMS 1.2.0. There is a Path Traversal vulnerability which could cause arbitrary file read via /static/ueditor/php/controller.php...

CVE-2022-37299

An issue was discovered in Shirne CMS 1.2.0. There is a Path Traversal vulnerability which could cause arbitrary file read via /static/ueditor/php/controller.php...

CVE-2022-37299

An issue was discovered in Shirne CMS 1.2.0. There is a Path Traversal vulnerability which could cause arbitrary file read via /static/ueditor/php/controller.php...

CVE-2022-37299

An issue was discovered in Shirne CMS 1.2.0. There is a Path Traversal vulnerability which could cause arbitrary file read via /static/ueditor/php/controller.php...

CVE-2022-37299

Summary: Shirne CMS 1.2.0 is vulnerable to local file inclusion (path traversal) via /static/ueditor/php/controller.php, enabling arbitrary file reads. Impact: unauthorized access to sensitive files; potential remote code execution and system compromise. Root cause: path traversal in the LFI vect...

PT-2022-24480 · Unknown · Smartvista Cardgen

Name of the Vulnerable Software and Affected Versions: SmartVista Cardgen version 3.28.0 Description: A Path Traversal issue allows authenticated attackers to read arbitrary files in the system. Recommendations: For SmartVista Cardgen version 3.28.0, consider restricting access to sensitive files...

PT-2022-23911 · Unknown · Shirne Cms

Name of the Vulnerable Software and Affected Versions: Shirne CMS version 1.2.0 Description: The issue is related to a Path Traversal vulnerability that could cause arbitrary file read. This is possible via the /static/ueditor/php/controller.php endpoint. Recommendations: For Shirne CMS version...

CVE-2022-2943

The WordPress Infinite Scroll – Ajax Load More plugin for Wordpress is vulnerable to arbitrary file reading in versions up to, and including, 5.5.3 due to insufficient file path validation on the almrepeatersexport function. This makes it possible for authenticated attackers, with administrative...

CVE-2022-2943

The WordPress Infinite Scroll – Ajax Load More plugin for Wordpress is vulnerable to arbitrary file reading in versions up to, and including, 5.5.3 due to insufficient file path validation on the almrepeatersexport function. This makes it possible for authenticated attackers, with administrative...

USN-5190-1 graphicsmagick vulnerabilities

It was discovered that GraphicsMagick allowed reading arbitrary files via specially crafted images. An attacker could use this issue to expose sensitive information. This issue only affects Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 ESM. CVE-2019-12921 It was discovered that...

Cassandra Web File Read Vulnerability

This module exploits an unauthenticated directory traversal vulnerability in Cassandra Web 'Cassandra Web' version 0.5.0 and earlier, allowing arbitrary file read with the web server privileges. This vulnerability occurred due to the disabled Rack::Protection module Module Options msf use...