85 matches found
CVE-2018-16731
CScms 4.1 allows arbitrary file upload by for example adding the php extension to the default filetype list gif, jpg, png, and then providing a .php pathname within fileurl JSON data...
Apache Tika Information Disclosure Vulnerability
Apache Tika is the United States Apache Apache Software Foundation, an integrated POI using Java programs to provide read and write Microsoft Office format documents open-source library, Pdfbox read and create PDF documents pure Java class library and for text extraction work provides a unified...
CVE-2015-3271
Apache Tika server aka tika-server in Apache Tika 1.9 might allow remote attackers to read arbitrary files via the HTTP fileUrl header...
PT-2016-3610 · Apache · Apache Tika Server
Name of the Vulnerable Software and Affected Versions: Apache Tika server aka tika-server version 1.9 Description: The issue allows remote attackers to read arbitrary files via the HTTP fileUrl header. This is possible when Apache Tika is used as a web service, enabling a 3rd party to pass a...
RedHat Update for python RHSA-2011:0492-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...