Design/Logic Flaw

A vulnerability exists in gowitness 2.3.6 that allows an unauthenticated attacker to perform an arbitrary file read using the file:// scheme in the url parameter to get an image of any file...

CVE-2021-33359

gowitness

Arbitrary File Read

apport is vulnerable to arbitrary file read. The vulnerability exists in the function attach3dinfo in xorg-hwe-18.04...

Arbitrary File Read

apport:groovy is vulnerable to arbitrary file read due to a flaw in the function attach3dinfo...

Arbitrary File Read

apport is vulnerable to arbitrary file read. The vulnerability exists in the function addinfo...

Arbitrary File Read

apport:focal is vulnerable to arbitary file read due to a flaw in the function addinfo...

Arbitrary File Read

apport is vulnerable to arbitrary file read. The addinfo function allows arbitrary file read in openjdk-14...

Arbitary File Read

apport:focal is vulnerable to arbitrary file read. It is possible because of a flaw in the function addinfo in openjdk-8...

Arbitrary File Read

apport is vulnerable to arbitrary file read. The addinfo function allows arbitrary file read in openjdk-lts...

Arbitrary File Read Vulnerability in Network Keyboard Console of Suzhou Kodak Technology Co.

Ltd. is a leading video and security products and solutions provider, dedicated to video conferencing, video surveillance and a wealth of video application solutions. KODAK Network Keyboard Console has an arbitrary file read vulnerability that can be exploited by an attacker to arbitrarily read...

CVE-2020-35970

An issue was discovered in YzmCMS 5.8. There is a SSRF vulnerability in the background collection management that allows arbitrary file read...

CVE-2020-35970

An issue was discovered in YzmCMS 5.8. There is a SSRF vulnerability in the background collection management that allows arbitrary file read...

Server side request forgery (ssrf)

An issue was discovered in YzmCMS 5.8. There is a SSRF vulnerability in the background collection management that allows arbitrary file read...

CVE-2020-35970

In YzmCMS 5.8, a SSRF vulnerability exists in the backend collection management that allows arbitrary file read. Affected component: backend collection management module of YzmCMS 5.8. Root cause: server-side request forgery enabling access to arbitrary files. Impact stated as partial information...

CVE-2020-35970

An issue was discovered in YzmCMS 5.8. There is a SSRF vulnerability in the background collection management that allows arbitrary file read...

Arbitrary File Read Vulnerability in Techland MADP2.0 Mobile Financial Development Platform

Beijing Techland Software Systems Co., Ltd, founded in December 1999, is a Wall Street financial experts and Silicon Valley technology elite returned doctors, specializing in the application of financial software products and consulting services for the development of high-tech enterprises...

Synology Docker Path Traversal Vulnerability

Docker is an open source application container engine. It supports creating a container lightweight virtual machine and deploying and running applications on a Linux system, as well as automating the installation, deployment, and upgrading of applications through configuration files. A path...

Arbitrary File Read Vulnerability in Knowles CMS

Knowledge CMS is an open source website builder. Know CMS has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

Microhome Software Technology (Hangzhou) Co., Ltd. website builder system suffers from an arbitrary file read vulnerability

Microsoft Technology Hangzhou Co., Ltd. is a professional ECM Collaboration Management Software and BPM Business Process Management Software R & D and solution provider. There is an arbitrary file reading vulnerability in the website building system of Microhome Software Technology Hangzhou Co. A...

Arbitrary File Read Vulnerability in Advantech WebAccess Node

Advantech WebAccess Node is a software for monitoring PLCs and other devices from Advantech, Taiwan, China. The product can realize real-time control of equipment status by monitoring PLC and other devices. An arbitrary file read vulnerability exists in Advantech WebAccess Node. An attacker could...