Design/Logic Flaw

Vision Critical before 2014-05-30 allows attackers to read arbitrary files via unspecified vectors, as demonstrated by image files and configuration files...

CVE-2015-8276

LVRTC eParakstitajs 3.0 1.3.0 and edoc-libraries-2.5.401 allow attackers to read arbitrary files via crafted EDOC files...

CVE-2014-2960

Vision Critical before 2014-05-30 allows attackers to read arbitrary files via unspecified vectors, as demonstrated by image files and configuration files...

Arbitrary File Read

Trytond is vulnerable to arbitrary file reads. Remote authenticated users are able to read files through a root name with a different suffix. This vulnerability exists because of an incomplete fix for CVE-2016-1242...

DEBIAN-CVE-2017-0360

fileopen in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242...

CVE-2017-2686

Siemens RUGGEDCOM ROX I all versions contain a vulnerability that could allow an authenticated user to read arbitrary files through the web interface at port 10000/TCP and access sensitive information...

CVE-2017-2686

Siemens RUGGEDCOM ROX I (all versions) contains CVE-2017-2686: an authenticated user could read arbitrary files via the web interface on port 10000/TCP, exposing sensitive information. Root cause is improper authorization on the web interface (CWE-285); impact is partial confidentiality (I:H in C...

UBUNTU-CVE-2015-8625

MediaWiki before 1.23.12, 1.24.x before 1.24.5, 1.25.x before 1.25.4, and 1.26.x before 1.26.1 do not properly sanitize parameters when calling the cURL library, which allows remote attackers to read arbitrary files via an @ at sign character in unspecified POST array parameters...

Wordpress Sports Rankings and Lists Plugin Has Multiple Vulnerabilities

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A directory traversal and arbitrary file read vulnerability exists in the Wordpress Sports Rankings and Lists plugin, which c...

CVE-2017-6805

Directory traversal vulnerability in the TFTP server in MobaXterm Personal Edition 9.4 allows remote attackers to read arbitrary files via a .. dot dot in a GET command...

Multiple Cisco Products Arbitrary File Read Vulnerabilities

Cisco Tidal Enterprise Scheduler and Cisco Workload Automation Client Manager Server are both products of Cisco, Inc.Cisco Tidal Enterprise Scheduler is a cross-platform enterprise Cisco Tidal Enterprise Scheduler is a cross-platform enterprise scheduling application. An arbitrary file read...

Cisco Workload Automation and Tidal Enterprise Scheduler Client Manager Server Arbitrary File Read Vulnerability

A vulnerability in the Client Manager Server of Cisco Workload Automation and Cisco Tidal Enterprise Scheduler could allow an unauthenticated, remote attacker to retrieve any file from the Client Manager Server. The vulnerability is due to insufficient input validation. An attacker could exploit...

CVE-2017-5583

The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows remote authenticated users to read arbitrary files via unspecified vectors...

Samsung SRN-1670D Web Viewer Version 1.0.0.193 Arbitrary File Read and Upload

This module exploits an unrestricted file upload vulnerability in Web Viewer 1.0.0.193 on Samsung SRN-1670D devices. The networksslupload.php file allows remote authenticated attackers to upload and execute arbitrary PHP code via a filename with a .php extension, which is then accessed via a dire...

Arbitrary file reading vulnerability in the dir[0] parameter of DuoDuoRebate.com system

DuoDuo rebate system is for e-commerce rebate, shopping guide to provide solutions, is the open source PHP rebate site system. DuoDuo rebate website system V8.3UTF8 official version February 10, 2017 exists arbitrary file reading vulnerability. Allow attackers to exploit the vulnerability to read...

Ohoo Government System ohocms_viewcode.php Arbitrary File Read Vulnerability

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. There is an arbitrary file read vulnerability in the ohocmsviewcode.php file of the Ohu government system. An attacker can exploit this vulnerability to read arbitrary files...

Apple macOS HelpViewer 10.12.1 - XSS Leads to Arbitrary File Execution Arbitrary File Read

Apple macOS HelpViewer 10.12.1 - XSS Leads to Arbitrary File Execution Arbitrary File Read / OSX: HelpViewer XSS leads to arbitrary file execution and arbitrary file read. HelpViewer is an application and using WebView to show a help file. You can see it simply by the command: open...

D-Link DWR-932B Arbitrary File Read Vulnerability

The D-Link DWR-932B is a popular router device. The D-Link DWR-932B handles... A security vulnerability exists in %2f that allows remote attackers to submit a special request to read the contents of arbitrary files...

D-Link DWR-932B Directory Traversal Vulnerability

The D-Link DWR-932B is a popular router device. A directory traversal vulnerability exists in the D-Link DWR-932B, which allows remote attackers to exploit the vulnerability by submitting a special request to read the contents of an arbitrary file...

PHPMailer Arbitrary File Read Vulnerability

PHPMailer is a PHP class library for sending e-mail . An arbitrary file read vulnerability exists in PHPMailer. An attacker can read the contents of any file on the server...