CVE-2022-36997

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 and related NetBackup products. An attacker with authenticated access to a NetBackup Client could remotely trigger impacts that include arbitrary file read,...

Server side request forgery (ssrf)

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 and related NetBackup products. An attacker with authenticated access to a NetBackup Client could remotely trigger impacts that include arbitrary file read,...

DPTech VPN 安全漏洞

DPTech VPN is a VPN software from the Chinese company DPTech. A security vulnerability exists in DPTech VPN version v8.1.28.0, which stems from an arbitrary file read vulnerability...

PT-2022-22224 · Unknown · Dptech Vpn

Name of the Vulnerable Software and Affected Versions: DPTech VPN version 8.1.28.0 Description: The issue is related to an arbitrary file read vulnerability. Recommendations: For DPTech VPN version 8.1.28.0, at the moment, there is no information about a newer version that contains a fix for this...

WordPress Team Members Showcase < 4.1.2 - Subscriber+ Arbitrary File Read and Deletion

The plugin contains a file which could allow any authenticated users to download arbitrary files from the server via a path traversal vector. Furthermore, the file will also be deleted after its content is returned to the user...

WordPress Team Members Showcase < 4.1.2 - Subscriber+ Arbitrary File Read and Deletion

The plugin contains a file which could allow any authenticated users to download arbitrary files from the server via a path traversal vector. Furthermore, the file will also be deleted after its content is returned to the user PoC...

Directory Traversal

moodle/moodle is vulnerable to directory traversal. It does not validate the path used to import a lesson question, allowing an authorized user to cause an arbitrary file read via this feature...

GHSA-PGM5-CR62-PRXQ Moodle Arbitrary file read when importing lesson questions

The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary file read risk. This vulnerability allows a remote attacker to perform directory traversal attacks. The capability to access this feature...

Moodle Arbitrary file read when importing lesson questions

The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary file read risk. This vulnerability allows a remote attacker to perform directory traversal attacks. The capability to access this feature...

Moodle <= 3.9.14, 3.10 <= 3.11.7, 4.0 <= 4.0.1 Multiple Vulnerabilities

Moodle is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

WordPress MultiSafepay plugin for WooCommerce Arbitrary File Read Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. An arbitrary file read vulnerability exists in the WordPress MultiSafepay plugin for WooCommerce 4.13.1 and prior versions, which stems from...

Design/Logic Flaw

The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary file read risk. This vulnerability allows a remote attacker to perform directory traversal attacks. The capability to access this feature...

UBUNTU-CVE-2022-35650

The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary file read risk. This vulnerability allows a remote attacker to perform directory traversal attacks. The capability to access this feature...

CVE-2022-35650

CVE-2022-35650 affects Moodle and is due to an input validation error when importing lesson questions, causing insufficient path checks and enabling arbitrary file read via directory traversal. The vulnerability is described as exploitable by a remote attacker to perform directory traversal, with...

CVE-2022-35650

The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary file read risk. This vulnerability allows a remote attacker to perform directory traversal attacks. The capability to access this feature...

PT-2022-9059 · Snyk · Snyk-Broker

Name of the Vulnerable Software and Affected Versions: snyk-broker versions prior to 4.73.0 Description: The issue allows arbitrary file reads for users with access to Snyk's internal network via directory traversal. Recommendations: For versions prior to 4.73.0, update to version 4.73.0 or later...

snyk-broker 路径遍历漏洞

snyk-broker is a proxy program for access between snyk.io and Git repositories. A security vulnerability exists in snyk-broker versions prior to 4.73.0, which stems from the package's susceptibility to directory traversal, and can be exploited by an attacker to access read arbitrary files...

CVE-2022-33901 WordPress MultiSafepay plugin for WooCommerce plugin <= 4.13.1 - Unauthenticated Arbitrary File Read vulnerability

Unauthenticated Arbitrary File Read vulnerability in MultiSafepay plugin for WooCommerce plugin = 4.13.1 at WordPress...

CVE-2022-33901

CVE-2022-33901 : WordPress MultiSafepay for WooCommerce plugin

WordPress plugin MultiSafepay plugin for WooCommerce 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. An arbitrary file read vulnerability exists in the WordPress MultiSafepay plugin for WooCommerce 4.13.1 and prior versions, which stems from...