CVE ID :CVE-2018-25311 Published : April 29, 2026, 8:16 p.m. | 48 minutes ago Description :VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows authenticated attackers to disclose arbitrary files by injecting path traversal sequences in the ID parameter. Attackers can submit requests to downloadsys.pl, download_xml.pl, download.pl, downloadmib.pl, or downloadFile.pl with directory traversal payloads to read sensitive system files like /etc/passwd. Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...