VulnCheck KEV: CVE-2024-58387

Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/modelreport/file/download endpoint that allows unauthenticated remote attackers to read arbitrary files by supplying unvalidated path parameters index and ext. Attackers can craft requests such as...

CVE-2006-0701

readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters...

Design/Logic Flaw

readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters...