CVE-2019-19499

Grafana

CVE-2019-19499

Grafana = 6.4.3 has an Arbitrary File Read vulnerability, which could be exploited by an authenticated attacker that has privileges to modify the data source configurations...

CVE-2020-5916

In BIG-IP versions 15.1.0-15.1.0.4 and 15.0.0-15.0.1.3 the Certificate Administrator user role and higher privileged roles can perform arbitrary file reads outside of the web root directory...

DBHcms Arbitrary File Read Vulnerability

DBHcms is a small, free and open source content management system for personal and small business websites. An arbitrary file read vulnerability exists in dbhcmsmodmod.editor.php $GET'file' in DBHcms 1.2.0. Attackers can use the vulnerability to read the contents of any file...

CVE-2020-19890

DBHcms v1.2.0 has an Arbitrary file read vulnerability in dbhcms\mod\mod.editor.php $GET'file' is filename,and as there is no filter function for security, you can read any file's content...

CVE-2020-19890

DBHcms v1.2.0 has an Arbitrary file read vulnerability in dbhcms\mod\mod.editor.php $GET'file' is filename,and as there is no filter function for security, you can read any file's content...

CVE-2020-19890

CVE-2020-19890 affects DBHcms v1.2.0. An arbitrary file read flaw exists in the file path handling for the editor module (dbhcms/mod/mod.editor.php) where $_GET['file'] is not filtered, allowing reading of arbitrary files. This is a server-side vulnerability impacting confidentiality; the provide...

CVE-2020-19890

DBHcms v1.2.0 has an Arbitrary file read vulnerability in dbhcms\mod\mod.editor.php $GET'file' is filename,and as there is no filter function for security, you can read any file's content...

Arbitrary File Read Vulnerability in UCMS

UCMS is an open source content management system, which can be used to quickly develop a variety of enterprise stations, article stations and station systems. UCMS has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2020-8209

Improper access control in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 and leads to the ability to read arbitrary files...

Path Traversal in marcbachmann/node-html-pdf

Overview html-pdf is a Html to pdf converter in Node.js, this package is vulnerable to Arbitrary File Read. The package fails to sanitize the HTML input, allowing attackers to exfiltrate server files by supplying malicious HTML code. XHR requests in the HTML code are executed by the server. Input...

BlackBerry QNX Software Development Platform Input Validation Error Vulnerability

BlackBerry QNX Software Development Platform is a suite of QNX software development platforms from BlackBerry Canada. The platform is mainly used to develop software based on the QNX platform. A security vulnerability exists in the BlackBerry QNX Software Development Platform versions 6.4.0 throu...

Citrix Systems XenMobile Server Path Traversal Vulnerability

Citrix Systems XenMobile Server is a mobility management solution from Citrix Systems. The solution is able to manage mobile devices, develop mobile policies and compliance rules, and gain insight into the operation of mobile mobile networks. A path traversal vulnerability exists in Citrix System...

Arbitrary File Read Vulnerability in WiseGiga NAS

Shinhan Import & Export Co., Ltd. is a Korean company that sells NAS products. An arbitrary file read vulnerability exists in WiseGiga NAS, which can be exploited by attackers to obtain sensitive information...

Dream CMS suffers from an arbitrary file read vulnerability

Dream CMS, abbreviated as "lmxcms", is an open source website management system cms with no license restrictions. Dream CMS has an arbitrary file reading vulnerability that can be exploited by attackers to read arbitrary files and obtain sensitive information...

Arbitrary file read vulnerability in zblogphp 1.5.1

Z-Blog is an open source program based on Asp and PHP platforms. Z-Blog background arbitrary file reading vulnerability, attackers can use the vulnerability to obtain the site source code...

Arbitrary File Read Vulnerability in CLTPHP Open Source Edition

CLTPHP content management system is an efficient site-building PHP content management system , but also an open source CMS system . CLTPHP open source version of the existence of arbitrary file reading vulnerability , an attacker can exploit the vulnerability to read any file on the server...

Qingdao Yiqi Tianchuang Management Consulting Co., Ltd. Zendo open source version of the existence of arbitrary file read vulnerability

Zendo Open Source Edition is a research and development project management software. Qingdao Yiqi Tianchuang Management Consulting Co., Ltd Zendo Open Source Edition There is an arbitrary file read vulnerability, which can be exploited by attackers to obtain sensitive information...

FreeBSD : Gitlab -- Multiple Vulnerabilities (a003b74f-d7b3-11ea-9df1-001b217b3468)

Gitlab reports : Arbitrary File Read when Moving an Issue Memory Exhaustion via Excessive Logging of Invite Email Error Denial of Service Through Project Import Feature User Controlled Git Configuration Settings Resulting in SSRF Stored XSS in Issue Reference Number Tooltip Stored XSS in Issues...

Gitlab -- Multiple Vulnerabilities

Gitlab reports: Arbitrary File Read when Moving an Issue Memory Exhaustion via Excessive Logging of Invite Email Error Denial of Service Through Project Import Feature User Controlled Git Configuration Settings Resulting in SSRF Stored XSS in Issue Reference Number Tooltip Stored XSS in Issues Li...