8981 matches found
The vulnerability of WebSphere Application Server application servers allows attackers to read arbitrary files.
The vulnerability of WebSphere Application Server’s application servers exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to remotely access and read arbitrary files using a specially crafted URL...
CVE-2016-2868
IBM Security QRadar SIEM 7.2.x before 7.2.7 allows remote authenticated administrators to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...
NETRUN VPN Internet Behavior Management Router Arbitrary File Read and Remote Command Execution Vulnerabilities
NetRun is currently a domestic network terminal equipment and application provider. NetRun's products cover Internet access, secure VPN virtual private network, Internet behavior management, cellular broadband access, professional traffic control, billing management system and so on. NETRUN VPN...
Multiple Generic Vulnerabilities in the Special Equipment Inspection Management System of Tronda Electronics Co.
Tronda Electronics Co., Ltd. is a business dealing in camera accessories. A file read and SQL injection vulnerability exists in the Special Equipment Inspection Management System of Tronda Electronics Ltd. Allows attackers to utilize common SQL injection tools to obtain sensitive database...
CloudBees Jenkins CI TAP Plugin Path Traversal Vulnerability
CloudBees Jenkins CI formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . Jenkins CI TAP is o...
Times bright China e-Learning system /resin-doc/examples/security-basic/viewfile parameter file arbitrary file read vulnerability
No description provided by source...
IBM Integrated Solutions Console arbitrary file read vulnerability
No description provided by source...
CVE-2016-4510
The WAP interface in Trihedral VTScada formerly VTS 8.x through 11.x before 11.2.02 allows remote attackers to bypass authentication and read arbitrary files via unspecified vectors...
D-Link DSR-250N任意文件读取漏洞
No description provided by source...
An arbitrary file read vulnerability recorded-vulnerability warning-the black bar safety net
Black box testing Black-box testing found that an interface exist arbitrary file read vulnerability. ! "" The preferred determination is file read or file contains, because filegetcontent“/etc/passwd”include“/etc/passwd”black box view of the performance may be the same. And the file contains is c...
Adobe Creative Cloud <= 3.5.1.209 Arbitrary File Read/Write Vulnerability
The version of Adobe Creative Cloud installed on the remote Windows host is prior or equal to 3.5.1.209. It is, therefore, affected by a flaw in the JavaScript API for Creative Cloud Libraries due to an exposed service. An unauthenticated, remote attacker can exploit this to read or write arbitra...
Adobe Creative Cloud <= 3.5.1.209 Arbitrary File Read/Write Vulnerability (Mac OS X)
The version of Adobe Creative Cloud installed on the remote Mac OS X host is prior or equal to 3.5.1.209. It is, therefore, affected by a flaw in the JavaScript API for Creative Cloud Libraries due to an exposed service. An unauthenticated, remote attacker can exploit this to read or write...
Pulse Connect Secure Request Forgery Vulnerability
Pulse Connect Secure aka PCS, formerly known as Juniper Junos Pulse is a suite of SSL VPN solutions from Pulse Secure, a US-based company. A security vulnerability exists in the administrator user interface of PCS. A remote attacker could exploit this vulnerability to enumerate files, read...
CVE-2016-4791
The administrative user interface in Pulse Connect Secure PCS 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote administrators to enumerate files, read arbitrary files, and conduct server side request forgery SSRF attacks via unspecified vectors...
CVE-2016-4791
The administrative user interface in Pulse Connect Secure PCS 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote administrators to enumerate files, read arbitrary files, and conduct server side request forgery SSRF attacks via unspecified vectors...
Futomi MP Form Mail CGI Professional Edition Directory Traversal Vulnerability
Futomi MP Form Mail CGI Professional Edition is a suite of software that sends mail in the form of CGI to a specified E-mail from Futomi, Japan. A directory traversal vulnerability exists in Futomi MP Form Mail CGI Professional Edition 3.2.3 and earlier versions. An attacker can exploit this...
Idera Up.time client for Linux Arbitrary File Read Vulnerability
Idera Up.time client for Linux is a server performance monitoring software client for Linux-based platforms. An arbitrary file read vulnerability exists in Idera Up.time client for Linux, which can be exploited by remote attackers to submit a special request to read an arbitrary file...
Request Forgery Vulnerability in OurPHP Server Side
OurPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. The upload file management module under the "Global/Interface" module in the administration background of OurPHP has a hidden remote file download function. Since the...
PLANET IP LFI / CSRF / XSS / Authentication Bypass
| | | | | | | | | | | | / | '\ \ /\ / / \ | | |/ | ' / | | | | \ V V / / | | | | | | \ \ /|| // ||||,|./|/ Security Adivisory 2016-04-06 www.orwelllabs.com Twitter:@orwelllabs mantra: ...not affect a product that is in scope for... AhHum! Overview ======== Technical Risk: high Likelihood of...