CVE-2018-12365

A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or interaction. This could result in exposure of private local files. This vulnerability affects Thunderbird 60, Thunderbird 52.9, Firefox ESR 60.1, Firefox...

HomeMatic Incorrect Access Control Vulnerability

Homeputer CL Studio für HomeMatic is a home automation system from Contronics. An incorrect access control vulnerability exists in HomeMatic that allows an attacker to gain full access to the system...

ansible-tower: Privilege escalation flaw allows for organization admins to obtain system privileges

Ansible Tower, before version 3.2.4, has a flaw in the management of system and organization administrators that allows for privilege escalation. System administrators that are members of organizations can have their passwords reset by organization administrators, allowing organization...

nodeaaaaa Directory Traversal Vulnerability

nodeaaaaa is a static file server. A directory traversal vulnerability exists in nodeaaaaa. An attacker can gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

Sly07 Path Traversal Vulnerability

sly07 is an API for reviewing text. A directory traversal vulnerability exists in sly07. An attacker can gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

Mirasys DVMS Workstation 5.12.6 Path Traversal

Exploit Title: Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6...

utahcityfinder Path Traversal Vulnerability

utahcityfinder is a package for building a list of Utah cities. A directory traversal vulnerability exists in utahcityfinder. An attacker could gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

goserv directory traversal vulnerability

goserv is an HTTP server. A directory traversal vulnerability exists in goserv. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

cuciuci directory traversal vulnerability hole

cuciuci is a file server. A directory traversal vulnerability exists in cuciuci. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

Exxxxxxxxxxxxxx Directory Traversal Vulnerability

exxxxxxxxxxxxxx is a JavaScript-based package. A directory traversal vulnerability exists in exxxxxxxxxxxx. An attacker can exploit this vulnerability by placing a '. /' sequence in a URL to gain access to the file system...

easyquick Directory Traversal Vulnerability

easyquick is a web server. A directory traversal vulnerability exists in easyquick. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

simple-npm-registry directory traversal vulnerability

simple-npm-registry is a package that supports distribution of private npm modules. A directory traversal vulnerability exists in simple-npm-registry. An attacker can exploit this vulnerability by placing a '. /' sequence in a URL to gain access to the file system...

unicorn-list path traversal vulnerability

unicorn-list is a web framework for dynamically loading content using the .cats engine. A path traversal vulnerability exists in unicorn-list. An attacker can exploit this vulnerability by placing a '. /' sequence in a URL to gain access to the file system...

lab6drewfusbyu path traversal vulnerability

lab6drewfusbyu is an HTTP server. A path traversal vulnerability exists in lab6drewfusbyu. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

rtcmulticonnection-client path traversal vulnerability

rtcmulticonnection-client is a signaling implementation of RTCMultiConnection.js based on Node.js and Scoket.io. A path traversal vulnerability exists in rtcmulticonnection-client. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

weather.swlyons Directory Traversal Vulnerability

weather.swlyons is a web server. A directory traversal vulnerability exists in weather.swlyons. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

lab6.brit95 Path Traversal Vulnerability

lab6.brit95 is a file server. A path traversal vulnerability exists in lab6.brit95. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

http_static_simple Directory Traversal Vulnerability

httpstaticsimple is a static HTTP server. A directory traversal vulnerability exists in httpstaticsimple. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Tivoli Netcool/OMNIbus (Multiple CVEs)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Versions 6 and 7 that are used by Tivoli Netcool/OMNIbus. These were disclosed as part of the IBM Java SDK updates in October 2015. Vulnerability Details CVEID: CVE-2015-4872 DESCRIPTION: An unspecifi...

Security Bulletin: IBM QRadar SIEM is vulnerable to clear text passwords. (CVE-2016-9750)

Summary The software stores user or system passwords unencrypted which can allow attackers with file system access, the ability to escalate privileges, or to obtain access to other systems the software integrates with. Vulnerability Details CVEID: CVE-2016-9750 DESCRIPTION: IBM Qradar stores user...