Gitlab -- Multiple Vulnerabilities

Gitlab reports: Arbitrary File Read when Moving an Issue Path Traversal in NPM Package Registry SSRF on Project Import External Users Can Create Personal Snippet Triggers Decription Can be Updated by Other Maintainers in Project Information Disclosure on Confidential Issues Moved to Private...

Arbitrary File Read Vulnerability in Zibo Exam System

Founded in 2010, Guangzhou Qibo Network Technology Co., Ltd. is a professional value-added distribution of IT network products and computer network system integration company, dedicated to providing customers with quality products, solutions and services. There is an arbitrary file reading...

Apple macOS Catalina Time Machine Component Arbitrary File Read Vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers.Time Machine is one of the computer backup components. A security vulnerability exists in the Time Machine component of Apple macOS Catalina versions prior to 10.15.4. A local attacker can exploit the...

CVE-2020-3761

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability. Successful exploitation could lead to arbitrary file read from the coldfusion install directory...

Design/Logic Flaw

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability. Successful exploitation could lead to arbitrary file read from the coldfusion install directory...

CVE-2020-3761

ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability. Successful exploitation could lead to arbitrary file read from the coldfusion install directory...

CVE-2020-5554

Directory traversal vulnerability in Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write arbitrary files via unspecified vectors...

CVE-2020-5555

Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write data of the files placed in the same directory where it is placed via unspecified vector due to the improper input validation issue...

The vulnerability of the TempFileName parameter of the CGI script cgiRecvFile.exe in the Worry-Free Business Security antivirus protection system allows a hacker to read arbitrary files in the target system.

The vulnerability of the TempFileName parameter in the CGI executable cgiRecvFile.exe exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to read arbitrary files on the target system by sending specially crafted HTTP requests...

Arbitrary File Read Vulnerability in AppVision's Video Surveillance System

Applusoft specializes in UHD, ultra-long focus, multi-spectral, thermal imaging products, technical services and overall customized solutions. AppVision's video surveillance system has an arbitrary file reading vulnerability, the vulnerability is due to its video surveillance backend does not do...

Arbitrary File Read Vulnerability in Five Fingers CMS

Five fingers CMS is a high-performance open source content management system , support for LNAMP architecture , suitable for portals , corporate Web site , mobile site , microblogging promotion. Five Fingers CMS arbitrary file reading vulnerability , an attacker can exploit the vulnerability to...

Adobe ColdFusion Remote File Read Vulnerability

Adobe ColdFusion is a commercial rapid application development platform. A remote file read vulnerability exists in Adobe ColdFusion. An attacker can use this vulnerability to read arbitrary files from the Coldfusion installation directory...

Arbitrary File Read Vulnerability in QCMS

QCMS is an open source content management system for creating responsive websites. QCMS suffers from an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...

Syncro Soft Oxygen XML Editor Arbitrary File Read Vulnerability

Syncro Soft Oxygen XML Editor is an XML editor from Syncro Soft Romania. A security vulnerability exists in Oxygen XML Editor version 21.1.1. An attacker can exploit the vulnerability to read arbitrary files...

CVE-2019-20191

Oxygen XML Editor 21.1.1 allows XXE to read any file...

QCMS Arbitrary File Read Vulnerability

QCMS is an open source content management system CMS for creating responsive websites from China's Velvet Ease Technology Corporation. A security vulnerability exists in the system/controller/backend/template.php file in the QCMS v3.0.1 version of VelvetEase Technology. An attacker can exploit th...

CVE-2020-10578

An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1...

CVE-2020-10578

An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1...

CVE-2020-10578

An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1...

CVE-2020-10578

CVE-2020-10578 affects QCMS v3.0.1 with an arbitrary file read vulnerability in the file path system/controller/backend/template.php. Multiple connected sources (NVD, Red Hat, CNVD, CNVD CNVD-2020-19603, etc.) corroborate that an attacker can read files, leading to information disclosure. The des...