Vulnerabilities (CVE)

Filtered by CWE-22
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-2872 1 Ibm 2 Qradar Security Information And Event Manager, Security Qradar Incident Forensics 2016-07-05 5.0 MEDIUM 5.3 MEDIUM
Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.7 and QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to read arbitrary files via a crafted URL.
CVE-2015-4703 1 Rename Project 1 Rename 2016-06-27 5.0 MEDIUM 5.3 MEDIUM
Absolute path traversal vulnerability in mysqldump_download.php in the WordPress Rename plugin 1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the dumpfname parameter.
CVE-2016-1192 1 Cybozu 1 Garoon 2016-06-21 4.0 MEDIUM 4.3 MEDIUM
Directory traversal vulnerability in the logging implementation in Cybozu Garoon 3.7 through 4.2 allows remote authenticated users to read a log file via unspecified vectors.
CVE-2016-1191 1 Cybozu 1 Garoon 2016-06-21 5.0 MEDIUM 5.3 MEDIUM
Directory traversal vulnerability in the Files function in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to modify settings via unspecified vectors.
CVE-2016-1231 3 Debian, Fedoraproject, Prosody 3 Debian Linux, Fedora, Prosody 2016-06-15 4.3 MEDIUM 5.9 MEDIUM
Directory traversal vulnerability in the HTTP file-serving module (mod_http_files) in Prosody 0.9.x before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) in an unspecified path.
CVE-2015-8794 1 Roundcube 1 Roundcube Webmail 2016-02-25 4.0 MEDIUM 6.5 MEDIUM
Absolute path traversal vulnerability in program/steps/addressbook/photo.inc in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via a full pathname in the _alt parameter, related to contact photo handling.
CVE-2015-2007 1 Ibm 1 Qradar Security Information And Event Manager 2016-01-07 4.0 MEDIUM 5.0 MEDIUM
Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.5 Patch 6 allows remote authenticated users to read arbitrary files via a crafted URL.