2614 matches found
CVE-2019-18286
A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. The Application Server exposes directory listings and files containing sensitive information. This vulnerability is independent from CVE-2019-18287. Please note that an attacker needs to have...
CVE-2019-18287
A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. The Application Server exposes directory listings and files containing sensitive information. This vulnerability is independent from CVE-2019-18286. Please note that an attacker needs to have...
Bullwark Momentum Series JAWS 1.0 - Directory Traversal Vulnerability
Exploit for php platform in category web applications Title: Bullwark Momentum Series JAWS 1.0 - Directory Traversal Author: Numan Türle Vendor Homepage: http://www.bullwark.net/ Version : Bullwark Momentum Series Web Server JAWS/1.0 Software Link :...
Siemens SPPA-T3000 Application Server Improper Authentication Vulnerability (CNVD-2019-45414)
SPPA-T3000 is a distributed control system mainly used in thermal power plants and large-scale renewable energy power plants.Application Server is the application server in it, which provides the main system services including access control, distribution of data to thin clients and archiving. A...
CVE-2019-15996 Cisco DNA Spaces: Connector Privilege Escalation Vulnerability
A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root. The vulnerability is due to insufficient restrictions during the execution of an affected CLI command. An...
U.S. Dept Of Defense: Unprotected ██████ and Test site API Exposes Documents, Credentials, and Emails in ██████████ Proposal System
Summary: The test/integration API of the █████ web services is publicly exposed: disclosing documents, emails, and credentials to what appears to be the Seaport Bid proposal system. Because I did not attempt any exploitation outside of that necessary to deem this a reportable issue, it is not cle...
CVE-2019-3663
Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense ATD prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. This was originally published with a CVSS rating of High, further investigation has resulted i...
CVE-2019-3663
Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense ATD prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. This was originally published with a CVSS rating of High, further investigation has resulted i...
Design/Logic Flaw
Unprotected Storage of Credentials vulnerability in McAfee Advanced Threat Defense ATD prior to 4.8 allows local attacker to gain access to the root password via accessing sensitive files on the system. This was originally published with a CVSS rating of High, further investigation has resulted i...
CVE-2019-3663
The CVE-2019-3663 issue affects McAfee Advanced Threat Defense (ATD) prior to version 4.8. It arises from unprotected storage of credentials, enabling a local attacker to read the root password from sensitive files; the root password is common across ATD deployments prior to 4.8. CVSS assessments...
PT-2019-15560 · Helm +2 · Helm +2
Name of the Vulnerable Software and Affected Versions: Helm versions 2.x through 2.15.1 Description: The issue allows a maliciously designed chart to include sensitive content, such as /etc/passwd, or to execute a denial of service DoS via a special file, like /dev/urandom, using symlinks. This i...
Directory Traversal Vulnerability in MacCMS Backend
MacCMS is a cms website builder system. A directory traversal vulnerability exists in the MacCMS backend. It allows an attacker to traverse the directory and obtain sensitive directory and file information...
Arbitrary File Read Vulnerability in Blue Route Blog System
Shenzhen Blue Route Technology Co., Ltd, provides cloud computing products, cloud computing solutions, enterprise cloud application software, etc., is committed to providing customers with professional cloud services. Blue Route blog system there is an arbitrary file reading vulnerability,...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Redhat Cloudforms
CVE-2018-3760 Rails Asset Pipeline Directory Traversal Vuln...
CVE-2019-14424
A Local File Inclusion LFI issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to read sensitive files via a simple HTTP Request...
Cross site request forgery (csrf)
A Local File Inclusion LFI issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers to read sensitive files via a simple HTTP Request...
File Containment Vulnerability in Website Building System of Beijing Zhengmeng Network Technology Co.
Beijing positive amount of network technology limited company positive amount of network, is based on cloud computing enterprise electronic bidding and procurement and supply chain cooperative management overall solution provider. Beijing positive amount of network technology limited company...
Unauthorized Download Vulnerability in Kaixin Quote System
Qixing Quotation System V2.0 is a general management system developed for material quotations. Unauthorized download vulnerability exists in the Qixing Quotation System, which can be exploited by an attacker to obtain sensitive information by unauthorized downloading of sensitive files...
