CVE-2019-19031

Easy XML Editor through v1.7.8 is affected by: XML External Entity Injection. The impact is: Arbitrary File Read and DoS by consuming resources. The component is: XML Parsing. The attack vector is: Specially crafted XML payload...

CVE-2019-19031

Easy XML Editor through v1.7.8 is affected by: XML External Entity Injection. The impact is: Arbitrary File Read and DoS by consuming resources. The component is: XML Parsing. The attack vector is: Specially crafted XML payload...

Xxe

Easy XML Editor through v1.7.8 is affected by: XML External Entity Injection. The impact is: Arbitrary File Read and DoS by consuming resources. The component is: XML Parsing. The attack vector is: Specially crafted XML payload...

Xxe

XMLBlueprint through 16.191112 is affected by XML External Entity Injection. The impact is: Arbitrary File Read when an XML File is validated. The component is: XML Validate function. The attack vector is: Specially crafted XML payload...

CVE-2019-19032

XMLBlueprint XML Editor version 16.191112 and earlier is affected by XML External Entity (XXE) Injection (CVE-2019-19032). A crafted XML payload can trigger the XML Validate function to read arbitrary files, enabling Arbitrary File Read during validation. The vulnerability is linked to the XML Ex...

CVE-2019-19031

Easy XML Editor through v1.7.8 is affected by: XML External Entity Injection. The impact is: Arbitrary File Read and DoS by consuming resources. The component is: XML Parsing. The attack vector is: Specially crafted XML payload...

CVE-2019-19031

CVE-2019-19031 affects Easy XML Editor up to version 1.7.8 (and earlier). The issue is an XML External Entity Injection in the XML parsing component, triggered by a specially crafted XML payload. Ranked with high impact in CVSS 3.1: high confidentiality and availability impacts (C:H, A:H) and net...

VulnCheck KEV: CVE-2016-0752

Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files...

Updated libvirt packages fix security vulnerabilities

Updated libvirt packages fix security vulnerabilities: An information leak which allowed to retrieve the guest hostname under readonly mode CVE-2019-3886. Wrong permissions in systemd admin-sock due to missing SocketMode parameter CVE-2019-10132. Arbitrary file read/exec via...

Arbitrary File Read Vulnerability in ZTE ZSRV2 Series Multiservice Routers

ZXR10 ZSR V2 series router is a next-generation intelligent access router product integrating routing, switching, wireless, security, VPN, and AC launched by ZTE. The product adopts the industry-leading hardware platform and software architecture, which provides an intelligent and resilient devic...

Access Control Bypass Vulnerability in Zendo Project Management System

Zendo is China's first open source project management software. It integrates product management , project management , quality management , document management , organization management and transaction management. Zendo Project Management System has an arbitrary file read vulnerability that can ...

Arbitrary File Read Vulnerability in Zendo Project Management System

Zendo is China's first open source project management software. It integrates product management , project management , quality management , document management , organization management and transaction management. Zendo project management system has an arbitrary file read vulnerability , an...

Arbitrary File Read Vulnerability in ZTE ZXR10 1800-2S Router (CNVD-2020-01283)

The ZTE ZXR10 1800-2S Router is a multi-service intelligent router manufactured by ZTE Corporation. An arbitrary file read vulnerability exists in the ZTE ZXR10 1800-2S router, which can be exploited by an attacker to access arbitrary files by sending a malicious request...

Arbitrary File Read Vulnerability in ZTE ZXR10 1800-2S Router

The ZTE ZXR10 1800-2S Router is a multi-service intelligent router manufactured by ZTE Corporation. An arbitrary file read vulnerability exists in the ZTE ZXR10 1800-2S router, which can be exploited by an attacker to access arbitrary files by sending a malicious request...

Arbitrary File Read Vulnerability in ZTE ZXR10 1800-2S Router (CNVD-2020-01284)

The ZTE ZXR10 1800-2S Router is a multi-service intelligent router manufactured by ZTE Corporation. An arbitrary file read vulnerability exists in the ZTE ZXR10 1800-2S router, which can be exploited by an attacker to access arbitrary files by sending a malicious request...

Arbitrary File Read Vulnerability in Oracle WebLogic Component

WebLogic is the United States Oracle Corporation produced a middleware based on the JAVAEE architecture , is used to develop , integrate , deploy and manage large-scale distributed Web applications , network applications and database applications of Java application servers . An arbitrary file re...

W3 Total Cache Plugin for WordPress < 0.9.4 Arbitrary File Read

The WordPress W3 Total Cache Plugin installed on the remote host is affected by an arbitrary file read vulnerability due to improper sanitization of user-supplied input. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version...

CVE-2012-5535

gnome-system-log polkit policy allows arbitrary files on the system to be read...

Grafana Labs Arbitrary File Read (CVE-2018-19039)

An information disclosure vulnerability exists in Grafana. This vulnerability is due to insufficient handling of direct link image rendering of HTML text panels. A remote, authenticated attacker can exploit the vulnerability by creating a crafted HTML text panel and requesting a direct link image...

Arbitrary file reading vulnerability in fe***.php file of Tuan ah VIP movie system

Tuan ah VIP movie system is a set of VIP movie video watching website source code with registered member agent version. Tuan ah VIP movie system fe.php file exists arbitrary file reading vulnerability, an attacker can use this vulnerability to read arbitrary files...