Buffalo LS520D has a information leakage vulnerability

The Buffalo LS520D is a network attached storage device from Buffalo Japan that efficiently handles multi-CPU access to store and share data. A security vulnerability exists in the Buffalo LS520D version 4.53 that originates from an unauthenticated user being able to access the NAS web UI and rea...

CVE-2024-23540: Improper Limitation of a Pathname to a Restricted Directory

The HCL BigFix Inventory server is vulnerable to path traversal which enables an attacker to read internal application files from the Inventory server. The BigFix Inventory server does not properly restrict the served static file...

CVE-2023-46502

An issue in openCRX v.5.2.2 allows a remote attacker to read internal files and execute server side request forgery attack via insecure DocumentBuilderFactory...

CVE-2023-46502

An issue in openCRX v.5.2.2 allows a remote attacker to read internal files and execute server side request forgery attack via insecure DocumentBuilderFactory...

PT-2022-16135 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 12.10.9 XWiki Platform versions prior to 13.4.3 XWiki Platform versions prior to 13.7-rc-1 Description: The issue allows any user with SCRIPT right to read any file located in the XWiki WAR, such as xwiki.cfg...

CVE-2021-25972

In Camaleon CMS, versions 2.1.2.0 to 2.6.0, are vulnerable to Server-Side Request Forgery SSRF in the media upload feature, which allows admin users to fetch media files from external URLs but fails to validate URLs referencing to localhost or other internal servers. This allows attackers to read...

CVE-2021-29461

Discord Recon Server is a bot that allows one to do one's reconnaissance process from one's Discord. A vulnerability in Discord Recon Server prior to 0.0.3 could be exploited to read internal files from the system and write files into the system resulting in remote code execution. This issue has...

PT-2021-18231 · Unknown · Discord Recon Server

Name of the Vulnerable Software and Affected Versions: Discord Recon Server versions prior to 0.0.3 Description: A vulnerability in Discord Recon Server could be exploited to read internal files from the system and write files into the system, resulting in remote code execution. The issue has bee...

PT-2020-15927

Name of the Vulnerable Software and Affected Versions Setelsa Conacwin affected versions not specified Description The issue allows a remote unauthenticated attacker to read internal files on the server via a Directory Traversal URI, such as http://IP:PORT/../../path/file to disclose. The...

PT-2019-13600

Name of the Vulnerable Software and Affected Versions Aptana Jaxer version 1.0.3.4547 Description The issue allows a remote attacker to read internal files on the server. This is achieved through a local file inclusion vulnerability in the wikilite source code viewer, specifically by manipulating...

CVE-2019-14312: Improper Limitation of a Pathname to a Restricted Directory

Aptana Jaxer 1.0.3.4547 is vulnerable to a local file inclusion vulnerability in the wikilite source code viewer. This vulnerability allows a remote attacker to read internal files on the server via a tools/sourceViewer/index.html?filename=../ URI...

Aptana Jaxer wikilite source browser local file inclusion vulnerability

Aptana Jaxer is an open source JavaScript server . A local file inclusion vulnerability exists in the wikilite source viewer in Aptana Jaxer version 1.0.3.4547. A remote attacker can exploit this vulnerability with tools/sourceViewer/index.html?filename=... / URI to read internal files...