CVE-2016-2933

Directory traversal vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated administrators to read arbitrary files via a crafted request...

LXC Directory Traversal Vulnerability

LXC is a user-space interface to the Linux kernel's container functionality that makes it easy for Linux users to create and manage system or application containers through a powerful API and simple tools. LXC suffers from a directory traversal vulnerability. As the program fails to adequately...

Cisco IOS XE Software Directory Traversal Vulnerability

Cisco IOS XE is the United States Cisco Cisco company's next-generation network operator routing system, a fully modular and fully distributed network interconnection operating system. Cisco IOS XE Software suffers from a directory traversal vulnerability that stems from the program's failure to...

vlcms_v1. 2 arbitrary file read vulnerability

No description provided by source...

Spark Arbitrary File Read Vulnerability

Spark is a miniature Java Web framework designed to let you create a Java Web application with minimal effort. An arbitrary file read vulnerability exists in Spark version 2.5, which can be exploited by an attacker to gain access to sensitive system information and launch further attacks...

Arbitrary File Read Vulnerability in zzcms 7.2 Version

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. ZZCMS v7.1 has an arbitrary file read vulnerability that can be exploited by an attacker to access restricted directories and execute commands outside the root directory of the web...

SPIP Directory Traversal Vulnerability

SPIP is a free Web-based content publishing system. The system is primarily used for online collaboration. A directory traversal vulnerability exists in SPIP versions 1.9.2-SPIP 3.0.7, which can be exploited by an attacker to steal cookie-based authentication and read arbitrary files, among other...

INDAS Web SCADA Directory Traversal Vulnerability

INDAS Web SCADA is a web-based SCADA system from INDAS Serbia. A directory traversal vulnerability exists in versions prior to INDAS Web SCADA 3. A remote attacker could exploit this vulnerability to read arbitrary files...

CVE-2016-6435

The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug ID CSCva30376...

PT-2016-6909 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center version 6.0.1 Description: The issue allows remote authenticated users to read arbitrary files via crafted parameters. Recommendations: For Cisco Firepower Management Center version 6.0.1, consider restrictin...

CVE-2016-2307

American Auto-Matrix Aspect-Nexus Building Automation Front-End Solutions application before 3.0.0 and Aspect-Matrix Building Automation Front-End Solutions application allow remote attackers to read arbitrary files via unspecified vectors, as demonstrated by the configuration file...

CVE-2016-8280

Directory traversal vulnerability in Huawei eSight before V300R003C20SPC005 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2016-8280

Directory traversal vulnerability in Huawei eSight before V300R003C20SPC005 allows remote authenticated users to read arbitrary files via unspecified vectors...

App Container docker2aci Directory Traversal Vulnerability

docker2aci is a set of tools for converting Docker a technology for cross-platform distribution of applications based on the Go language images into ACIs format. A directory traversal vulnerability exists in docker2aci. An attacker can leverage the directory traversal character '...' The...

CVE-2016-6410

The Cisco Application-hosting Framework CAF component in Cisco IOS 15.61T1 and IOS XE, when the IOx feature set is enabled, allows remote authenticated users to read arbitrary files via unspecified vectors, aka Bug ID CSCuy19856...

Arbitrary File Read Vulnerability in Shanghai Ohuhu Network Technology Co.

Shanghai Ohuhu Network Technology Co., Ltd. is a service-oriented enterprise integrating Internet software research and development, website operation, e-commerce and IT services. Shanghai Ohuhu Network Technology Co., Ltd Ohuhu government system suffers from an arbitrary file read vulnerability...

Arbitrary File Read Vulnerability in Ninth OA System

Ninth OA system is the OA system to install, implement, learn, operate and maintain. An arbitrary file read vulnerability exists in the Jiushi OA system. It allows attackers to exploit the vulnerability to obtain sensitive information. The vulnerable URL is:...

Arbitrary File Read Vulnerability in VoIP Operation Support System of Kunshi Network Technology Co.

The VoIP operation support system of Kunshi Network Technology Co., Ltd. is a support system for small and medium-sized VoIP operation business. The product suffers from an arbitrary file read vulnerability, which can be exploited by an attacker to read sensitive files such as service...

Airmail 3.0.2 - Cross-Site Scripting

Airmail 3.0.2 - Cross-Site Scripting Airmail is a popular email client on iOS and OS X. I found a vulnerability in airmail of the latest version which could cause a file:// xss and arbitrary file read. Author: redrain, [email protected] Date: 2016-08-15 Version: 3.0.2 and earlier Platform: OS X...

Airmail 3.0.2 Cross Site Scripting

Airmail is a popular email client on iOS and OS X. I found a vulnerability in airmail of the latest version which could cause a file:// xss and arbitrary file read. Author: redrain, [email protected] Date: 2016-08-15 Version: 3.0.2 and earlier Platform: OS X and iOS Site: http://airmailapp.com/...