Lucene search
+L

7971 matches found

Packet Storm
Packet Storm
added 2020/06/04 12:00 a.m.199 views

Secure Computing SnapGear Management Console SG560 3.1.5 Arbitrary File Read / Write

Secure Computing SnapGear Management Console SG560 v3.1.5 Arbitrary File Read/Write Vendor: Secure Computing Corp. Product web page: http://www.securecomputing.com Affected version: 3.1.5u1 Summary: The SG gateway appliance range provides Internet security and privacy of communications for small...

0.1AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2020/06/03 10:02 p.m.61 views

Arbitrary File Read in Snyk Broker

All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal...

6.5CVSS4.9AI score0.01685EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2020/06/03 10:02 p.m.29 views

GHSA-X7M2-6G99-84W5 Arbitrary File Read in Snyk Broker

All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal...

6.5CVSS6.5AI score0.01685EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2020/06/03 10:02 p.m.68 views

Arbitrary File Read in Snyk Broker

All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network by creating symlinks to match whitelisted paths...

6.5CVSS4.4AI score0.0113EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2020/06/03 10:02 p.m.38 views

GHSA-4VJ3-F849-5R48 Arbitrary File Read in Snyk Broker

All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network by creating symlinks to match whitelisted paths...

6.5CVSS6.5AI score0.0113EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2020/06/03 10:02 p.m.60 views

Arbitrary File Read in Snyk Broker

All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users who have access to Snyk's internal network by appending the URL with a fragment identifier and a whitelisted path e.g. package.json...

6.5CVSS4.2AI score0.0113EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2020/06/03 10:02 p.m.30 views

GHSA-9XV2-548X-5H79 Arbitrary File Read in Snyk Broker

All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users who have access to Snyk's internal network by appending the URL with a fragment identifier and a whitelisted path e.g. package.json...

6.5CVSS6.5AI score0.0113EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2020/06/03 10:02 p.m.62 views

Arbitrary File Read in Snyk Broker

All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read. It allows arbitrary file reads to users with access to Snyk's internal network of any files ending in the following extensions: yaml, yml or json...

6.5CVSS3.7AI score0.0113EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2020/06/03 10:02 p.m.45 views

GHSA-2FMP-7XWF-WVWR Arbitrary File Read in Snyk Broker

All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read. It allows arbitrary file reads to users with access to Snyk's internal network of any files ending in the following extensions: yaml, yml or json...

6.5CVSS6.4AI score0.0113EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2020/06/03 10:02 p.m.66 views

Arbitrary File Read in Snyk Broker

All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read. It allows partial file reads for users who have access to Snyk's internal network via patch history from GitHub Commits API...

4.3CVSS4.1AI score0.01115EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2020/06/03 10:02 p.m.31 views

GHSA-45HW-29X7-9X95 Arbitrary File Read in Snyk Broker

All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read. It allows partial file reads for users who have access to Snyk's internal network via patch history from GitHub Commits API...

4.3CVSS4.3AI score0.01115EPSS
SaveExploits0References3
CNVD
CNVD
added 2020/06/02 12:00 a.m.5 views

Arbitrary File Read Vulnerability in CloudCare Inspection Information System

Guangzhou Daan Clinical Laboratory Center Co., Ltd. is a high-tech enterprise group engaged in professional medical services, public health services and related technical support services. YunKang test information system there are arbitrary file reading vulnerability, an attacker can exploit the...

6.7AI score
SaveExploits0
Veracode
Veracode
added 2020/06/01 7:14 a.m.22 views

Arbitrary File Read

snyk-broker is vulnerable to arbitrary file read. Users with access to Snyk's internal network are able to read arbitrary files by renaming the files to match whitelisted paths...

6.5CVSS3.6AI score0.01685EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
added 2020/06/01 5:16 a.m.25 views

Arbitrary File Read

snyk-broker is vulnerable to arbitrary file read. The vulnerability exists as it does not properly restrict the values of the request headers...

4.3CVSS2.9AI score0.01115EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2020/06/01 12:00 a.m.11 views

Arbitrary File Read Vulnerability in WMCMS

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS arbitrary file reading vulnerability, an attacker can exploit the vulnerability to read files under the server...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2020/06/01 12:00 a.m.10 views

snyk-broker information disclosure vulnerability (CNVD-2020-54144)

snyk-broker is a proxy program for access between snyk.io and Git repositories. A security vulnerability exists in snyk-broker version 4.72.0 and later fixed in version 4.73.1. An attacker can exploit the vulnerability to read arbitrary files...

6.5CVSS6.8AI score0.0113EPSS
SaveExploits0References1
NVD
NVD
added 2020/05/29 10:15 p.m.24 views

CVE-2020-7650

All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read. It allows arbitrary file reads to users with access to Snyk's internal network of any files ending in the following extensions: yaml, yml or json...

6.5CVSS6.5AI score0.0113EPSS
SaveExploits0References2
NVD
NVD
added 2020/05/29 10:15 p.m.19 views

CVE-2020-7648

All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users who have access to Snyk's internal network by appending the URL with a fragment identifier and a whitelisted path e.g. package.json...

6.5CVSS6.5AI score0.0113EPSS
SaveExploits0References2
OSV
OSV
added 2020/05/29 10:15 p.m.16 views

CVE-2020-7648

All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users who have access to Snyk's internal network by appending the URL with a fragment identifier and a whitelisted path e.g. package.json...

6.5CVSS6.6AI score
SaveExploits0References2
OSV
OSV
added 2020/05/29 10:15 p.m.21 views

CVE-2020-7650

All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read. It allows arbitrary file reads to users with access to Snyk's internal network of any files ending in the following extensions: yaml, yml or json...

6.5CVSS6.5AI score
SaveExploits0References2
Rows per page
Query Builder