7962 matches found
Arbitrary File Read Vulnerability in oyplus-cms
oyplus-cms Yue video is a PHP and MySQL based open source video background management system . The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . oyplus-cms 1.6.0 version of an arbitrary file read...
OpenSMTPD 6.6.3 - Arbitrary File Read
Title: OpenSMTPD 6.6.3 - Arbitrary File Read Date: 2020-02-20 Author: qualys Vendor: https://www.opensmtpd.org/ CVE: 2020-8793 / Local information disclosure in OpenSMTPD CVE-2020-8793 Copyright C 2020 Qualys, Inc. This program is free software: you can redistribute it and/or modify it under the...
Arbitrary File Read Vulnerability in Spring Cloud Config
Spring Cloud Config is a configuration center in a distributed system , microservice environment , centralized management of all the services of the various environment configuration files , large-scale update of a configuration . Spring Cloud Config has an arbitrary file read vulnerability that...
Arbitrary file read vulnerability exists in oyplus-cms (CNVD-2020-23776)
oyplus-cms Yue video is a PHP and MySQL based open source video background management system . The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . joyplus-cms 1.6.0 version of an arbitrary file rea...
OpenSMTPD 6.6.3 - Arbitrary File Read Exploit
Title: OpenSMTPD 6.6.3 - Arbitrary File Read Author: qualys Vendor: https://www.opensmtpd.org/ CVE: 2020-8793 / Local information disclosure in OpenSMTPD CVE-2020-8793 Copyright C 2020 Qualys, Inc. This program is free software: you can redistribute it and/or modify it under the terms of the GNU...
OpenSMTPD 6.6.3 - Arbitrary File Read
OpenSMTPD 6.6.3 - Arbitrary File Read Title: OpenSMTPD 6.6.3 - Arbitrary File Read Date: 2020-02-20 Author: qualys Vendor: https://www.opensmtpd.org/ CVE: 2020-8793 / Local information disclosure in OpenSMTPD CVE-2020-8793 Copyright C 2020 Qualys, Inc. This program is free software: you can...
Alibaba BBP: SSRF / Arbitrary File Read on Alibaba Cloud Academy
Summary: Alibaba Cloud Academy certificate download function is vulnerable with SSRF bug. It can also read arbitrary file on the server. Steps To Reproduce: - Login to your https://edu.alibabacloud.com/ account - Click the url to Ping external...
WordPress Duplicator File Read Vulnerability
This module exploits an unauthenticated directory traversal vulnerability in WordPress plugin 'Duplicator' version 1.3.24-1.3.26, allowing arbitrary file read with the web server privileges. This vulnerability was being actively exploited when it was discovered. Module Options msf use...
CVE-2020-9038
Joplin through 1.0.184 allows Arbitrary File Read via XSS...
CVE-2020-9038
Joplin through 1.0.184 allows Arbitrary File Read via XSS...
Cross site scripting
Joplin through 1.0.184 allows Arbitrary File Read via XSS...
CVE-2020-9038
CVE-2020-9038 affects Joplin Desktop up to version 1.0.184 (and earlier). The issue is a Cross-Site Scripting (XSS) vulnerability that enables an attacker to read arbitrary files via a malicious note, effectively an Arbitrary File Read. The root cause is an XSS condition in Joplin’s handling of n...
YouDianCMS suffers from XML entity injection vulnerability (CNVD-2020-15540)
YouDianCMS is an enterprise website management system developed by Changsha YouDian Software Technology Co. YouDianCMS suffers from an XML entity injection vulnerability. An attacker can exploit the vulnerability to read arbitrary files, execute system commands, and probe intranet ports...
JetBrains IntelliJ IDEA Information Disclosure Vulnerability
JetBrains IntelliJ IDEA is a Czech company JetBrains set of integrated development environment for the Java language . An information disclosure vulnerability exists in JetBrains IntelliJ IDEA, which can be exploited by an attacker to perform arbitrary file read operations over a network...
Arbitrary File Read Vulnerability in AKCMS
AKCMS is a lightweight content management system based on PHP and MySQL. AKCMS has an arbitrary file read vulnerability that can be exploited by an attacker to read arbitrary files...
The vulnerability of the XML Parsing component in the Easy XML Editor allows a hacker to cause a service failure in the application or to read arbitrary files from the system.
The vulnerability of the XML Parsing component in the Easy XML Editor is related to errors in processing XML requests. Exploiting this vulnerability can allow an attacker to cause service failures in the application or enable them to read arbitrary files in the system by running a specially craft...
CVE-2020-7914
In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3...
CVE-2020-7914
In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3...
