Default configuration

The Upload method in the RealPage Module Upload ActiveX control in Realpage.dll 1.0.0.9 in RealPage Module ActiveX Controls does not properly restrict certain property values, which allows remote attackers to read arbitrary files via a filename in the SourceFile property in conjunction with an ht...

CVE-2010-2239

The CVE affects Red Hat libvirt, possibly version 0.6.0 through 0.8.2. The issue arises when creating new images without setting the user-defined backing-store format, which could allow guest OS users to read arbitrary files on the host via unspecified vectors. Connected documents (e.g., openSUSE...

CVE-2010-1457

The CVE-2010-1457 issue affects GNUstep Base (tool: gdomap) where Tools/gdomap.c prints file contents in error messages, allowing local users to read arbitrary files. Affected: GNUstep Base prior to 1.20.0; root cause is error-message disclosure from -c/-a options. Consequences are local file dis...

Moa Gallery 1.2.0 - p_filename Remote File Disclosure

Moa Gallery 1.2.0 - pfilename Remote File Disclosure Moa Gallery = 1.2.0 Remote File Disclosure Vulnerability Code In sources\templateparser.php $filename = $MOAPATH."templates/".$templatename."/".$pfilename; $fp = @fopen$filename, "r"; if !$fp && isbool$fp $fp = $fp =...

e107 Plugin my_gallery 2.4.1 - 'readfile()' Local File Disclosure

Web 2 XPL : File 2 Read : "; if $POST'xpl' $data .= "GET /$vuln$trasv$file HTTP/1.1\r\n"; $data .= "Host: $host\r\n"; $data .= "Connection: close\r\n\r\n"; $html = sendpacket$host,$dat...

Design/Logic Flaw

The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary files via a crafted separator page, aka "Print Spooler Read File Vulnerability."...

CVE-2008-6754

The Personal Sticky Threads addon 1.0.3c for vBulletin allows remote authenticated users to read the title, author, and pages of an arbitrary thread by toggling a personal sticky...

CVE-2009-0018

The Remote Apple Events server in Apple Mac OS X 10.4.11 and 10.5.6 does not properly initialize a buffer, which allows remote attackers to read portions of memory...

CVE-2008-5420

CVE-2008-5420 concerns EMC Control Center prior to 6.1, where the SAN Manager Master Agent (msragent.exe) fails to authenticate SST_SENDFILE requests. This allows remote attackers to read arbitrary files by exploiting a flaw in the SST_SENDFILE handling (service listens on TCP port 10444). The vu...

CVE-2008-2342

Directory traversal vulnerability in attachments.php in News Manager 2.0 allows remote attackers to read arbitrary files via a .. dot dot in the id parameter...

CVE-2008-1782

phpdemo/viewsource.php in Advanced Software Engineering ChartDirector 4.1 allows remote attackers to read sensitive files via the file parameter...

Out-of-bounds

modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a craft...

CVE-2007-5225

CVE-2007-5225 is a Solaris local-privilege/ memory-leak issue caused by an integer signedness error in fifofs (FIFO filesystems) that allows a local user to read unspecified memory via a negative value to the I_PEEK ioctl on Solaris 8–10. For Solaris 10, patches exist: 127738-01 for x86 and 12773...

CVE-2006-7099

The CVE-2006-7099 entry describes a directory traversal vulnerability in SolarPay’s index.php, exploitable via a .. in the read parameter to read files. Affected software is SolarPay (component: index.php handling read parameter). Underlying cause: improper validation of path input leading to una...

CVE-2006-5858

Adobe ColdFusion MX 7 through 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote attackers to read arbitrary files, list directories, or read source code via a double URL-encoded NULL byte in a ColdFusion filename, such as a CFM file...

CVE-2006-5714

Easy File Sharing EFS Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of a HTTP GET request, which accesses the alternate data stream...

CVE-2006-3921

Sun Java System Application Server SJSAS 7 through 8.1 and Web Server SJSWS 6.0 and 6.1 allows remote authenticated users to read files outside of the "document root directory" via a direct request using a UTF-8 encoded URI...

FarsiNews 2.5Pro Exploit

!/usr/bin/perl HESSAM-X FarsiNews 2.5Pro Exploi Exploit by Hessam-x www.hessamx.net Iran Hackerz Security Team WebSite: www.hackerz.ir Summery Name : FarsiNews www.farsinewsteam.com version : 2.5Pro in FarsiNews if you change the archive value : http://localhost/index.php?archive=hamid see :...

CVE-2006-0145

The CVE-2006-0145 entry concerns the kernfs_xread function in kernfs for NetBSD (versions 1.6–2.1) and OpenBSD 3.8. The issue is improper validation of file offsets against negative 32-bit values that occur due to truncation, enabling local users to read arbitrary kernel memory and potentially ga...

CVE-2002-2095

CVE-2002-2095 affects the Joe Testa hellbent 01 webserver. The vulnerability allows attackers to read files listed in the hellbent.prefs by creating a similarly named file in the web root (e.g., using index.webroot or index.ipallow). The NVD entry reports a network-accessible issue with partial c...