CVE-2020-4789

IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM...

About the security content of watchOS 7.3

About the security content of watchOS 7.3 This document describes the security content of watchOS 7.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

node-red-contrib-huemagic path traversal vulnerability

node-red-contrib-huemagic is a solution for Foddy Personal Developer. A path traversal vulnerability exists in node-red-contrib-huemagic 3.0.0, which can be exploited to obtain arbitrary files...

Cisco StarOS for Cisco ASR 5000 Series Routers Arbitrary File Read (cisco-sa-staros-file-read-L3RDvtey)

According to its self-reported version, the Cisco StarOS operating system on the remote Cisco ASR 5000 series router is affected by an arbitrary file read vulnerability due to insecure handling of symbolic links. An authenticated, remote attacker can exploit this, by sending a crafted SFTP comman...

Arbitrary File Read Vulnerability in SongCMS

SongCMS is a free and open source CMS based on PHP+MySQL, ASP+Access/SQL Server development, enterprise-oriented, multi-language support. SSongCMS arbitrary file reading vulnerability , an attacker can use the vulnerability to read the site source code , any file...

Pre-Authorization Limited Arbitrary File Read in Jira Server - CVE-2020-29453

The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check. h3. Affected versions: version 8.5.11 8.6.0 ≤ version 8.13.3 8.14.0 ≤ versi...

Pre-Authorization Limited Arbitrary File Read in Jira Server - CVE-2020-29453

The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check. h3. Affected versions: version 8.5.11 8.6.0 ≤ version 8.13.3 8.14.0 ≤ versi...

Simple JobBoard Authenticated File Read

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Simple JobBoard Authenticated File Read Vulnerability', 'Description' = %q This module exploits an authenticated directory traversal vulnerabilit...

Arbitrary File Read Vulnerability in InRouter900 Industrial Router from Johntons

The Johnton-InRouter900 series industrial router is a 4G industrial router. The InRouter900 Industrial Router suffers from an arbitrary file read vulnerability, which originates from the program failing to properly validate user data, and can be exploited by a remote attacker to read arbitrary...

appcms V2.0 has an arbitrary file read vulnerability

appcms is a professional APP content management system that provides various extension modules, such as information, recommended positions, topics, friendly links, body internal links, etc., to help webmasters better personalize their websites. appcms V2.0 has an arbitrary file reading...

Arbitrary File Read Vulnerability in Lanproxy

Lanproxy is an intranet penetration tool that proxies LAN PCs and servers to the public network, supports tcp traffic forwarding, and can support any tcp upper-layer protocols access to intranet sites, debugging of local payment interfaces, ssh access, remote desktop, etc.. Lanproxy has an...

Arbitrary File Read Vulnerability in Ruijie Networks - EWEB Network Management System

Ltd. is an ICT infrastructure and industry solutions provider, with the main business of research, development, design and sales of network equipment, network security products and cloud desktop solutions. An arbitrary file read vulnerability exists in the Ruijie Network-EWEB network management...

Exploit for Files or Directories Accessible to External Parties in Apache Flink

CVE-2020-17519 Apache Flink Arbitrary File Reading Vulnerabil...

Arbitrary File Read Vulnerability in DIAView at Delta Electronics Enterprise Management (Shanghai) Co.

DIAView is an automated management system with real-time system monitoring, data capture and analysis. An arbitrary file read vulnerability exists in Delta Electronics Enterprise Management Shanghai Limited's DIAView, which can be exploited by attackers to obtain sensitive information...

Arbitrary File Read Vulnerability in DIAView at Delta Electronics Enterprise Management (Shanghai) Limited (CNVD-2021-08515)

DIAView is an automated management system with real-time system monitoring, data capture and analysis. An arbitrary file read vulnerability exists in Delta Electronics Enterprise Management Shanghai Limited's DIAView, which can be exploited by attackers to obtain sensitive information...

Arbitrary File Read Vulnerability in DIAView at Delta Electronics Enterprise Management (Shanghai) Limited (CNVD-2021-08514)

DIAView is an automated management system with real-time system monitoring, data capture and analysis. An arbitrary file read vulnerability exists in Delta Electronics Enterprise Management Shanghai Limited's DIAView configuration software, which can be exploited by attackers to obtain sensitive...

CVE-2021-21250

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which may lead to arbitrary file read. When BuildSpec is provided in XML format, the spec is processed by XmlBuildSpecMigrator.migratebuildSpecString; which processes the XML document withou...

CVE-2021-21250

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which may lead to arbitrary file read. When BuildSpec is provided in XML format, the spec is processed by XmlBuildSpecMigrator.migratebuildSpecString; which processes the XML document withou...

Design/Logic Flaw

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which may lead to arbitrary file read. When BuildSpec is provided in XML format, the spec is processed by XmlBuildSpecMigrator.migratebuildSpecString; which processes the XML document withou...

CVE-2021-21250

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which may lead to arbitrary file read. When BuildSpec is provided in XML format, the spec is processed by XmlBuildSpecMigrator.migratebuildSpecString; which processes the XML document withou...