CVE-2021-37445

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading...

CVE-2021-37446

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading...

Pre-Authorization Arbitrary File Read in /s/ endpoint - CVE-2021-26085

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3. This vulnerability was...

Pre-Authorization Arbitrary File Read in /s/ endpoint - CVE-2021-26085

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3. This vulnerability was...

Cisco SD-WAN vManage Software 安全漏洞

Cisco SD-WAN Solution is a set of network extension solutions from Cisco, of which vManage is the console. vManage Software for Cisco SD-WAN is vulnerable to an information disclosure vulnerability that could be exploited by an attacker to read arbitrary files on the underlying file system of the...

Adobe After Effects 缓冲区错误漏洞

Adobe After Effects "AE" is a graphics and video processing software from Adobe for organizations involved in design and video special effects, including television stations, animation production companies, personal post-production studios, and multimedia studios. Effects 18.2.1 and earlier...

Adobe Bridge CC 缓冲区错误漏洞

Adobe Bridge, a free digital asset management application from Adobe, is vulnerable to an out-of-bounds read vulnerability in Adobe Bridge 11.0.2 and earlier. An attacker could exploit the vulnerability to read arbitrary file systems...

Arbitrary File Read Vulnerability in Rendezvous Network Security Management System

Renzi Network Technology Co., Ltd. was founded in May 2000, and its business covers network security, information security, public security, network resource security, industrial internet security and many other fields, etc. etc. An arbitrary file read vulnerability exists in the Renzi Network...

Arbitrary File Read

phantomjs is vulnerable to arbitrary file read. An attacker is able to read arbitrary system files via an XMLHttpRequest with a file:// URI...

FreeBSD : Gitlab -- vulnerability (01974420-dfaf-11eb-ba49-001b217b3468)

Gitlab reports : Arbitrary file read via design feature %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2021 Jacques Vidrine and contributors Redistribution and use in sourc...

Gitlab -- vulnerability

Gitlab reports: Arbitrary file read via design feature...

Atlassian Confluence 7.5.x < 7.8.3 Arbitrary File Read

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 6.13.18, 6.14.x 7.4.6 or 7.5.x 7.8.3. It is, therefore, affected by an incorrect path access check vulnerability allowing unauthenticated remote attackers to read arbitrary...

Atlassian Confluence < 6.13.18 Arbitrary File Read

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 6.13.18, 6.14.x 7.4.6 or 7.5.x 7.8.3. It is, therefore, affected by an incorrect path access check vulnerability allowing unauthenticated remote attackers to read arbitrary...

Atlassian Confluence 6.14.x < 7.4.6 Arbitrary File Read

According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 6.13.18, 6.14.x 7.4.6 or 7.5.x 7.8.3. It is, therefore, affected by an incorrect path access check vulnerability allowing unauthenticated remote attackers to read arbitrary...

Node-RED-Dashboard 任意文件读取漏洞 （CVE-2021-3223）

...

PT-2021-6513 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 13.11 through 13.11.6 GitLab CE/EE versions 13.12 through 13.12.7 GitLab CE/EE versions 14.0 through 14.0.3 Description: An issue has been discovered in GitLab CE/EE that allows attackers to read arbitrary files on the...

ES File Explorer 4.1.9.7.4 - Arbitrary File Read Exploit

Exploit Title: ES File Explorer 4.1.9.7.4 - Arbitrary File Read Exploit Author: Nehal Zaman Version: ES File Explorer v4.1.9.7.4 Tested on: Android CVE : CVE-2019-6447 import requests import json import ast import sys if lensys.argv file to download" sys.exit1 url = 'http://' + sys.argv2 + ':5977...

ES File Explorer 4.1.9.7.4 Arbitrary File Read

Exploit Title: ES File Explorer 4.1.9.7.4 - Arbitrary File Read Date: 29/06/2021 Exploit Author: Nehal Zaman Version: ES File Explorer v4.1.9.7.4 Tested on: Android CVE : CVE-2019-6447 import requests import json import ast import sys if lensys.argv file to download" sys.exit1 url = 'http://' +...

ES File Explorer 4.1.9.7.4 - Arbitrary File Read

Exploit Title: ES File Explorer 4.1.9.7.4 - Arbitrary File Read Date: 29/06/2021 Exploit Author: Nehal Zaman Version: ES File Explorer v4.1.9.7.4 Tested on: Android CVE : CVE-2019-6447 import requests import json import ast import sys if lensys.argv file to download" sys.exit1 url = 'http://' +...

The vulnerability of the Icinga Web2 PHP framework allows a hacker to gain access to arbitrary files.

The vulnerability of the PHP framework Icinga Web2 exists due to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to arbitrary files that can be read by the Icinga Web2 process...