Lucene search
+L

9 matches found

Kitploit
Kitploit
added 2026/08/31 3:13 a.m.3 views

CVE-2026-37067

CVE-2026-37067 Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to extract all application logs from a desired date forwards via a specially crafted POST request...

5.3CVSS5.9AI score0.00244EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/27 8:17 p.m.6 views

CVE-2026-37067

Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to extract all application logs from a desired date forwards via a specially crafted POST request...

5.3CVSS0.00244EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/27 12:00 a.m.28 views

CVE-2026-37067

Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to extract all application logs from a desired date forwards via a specially crafted POST request...

0.00244EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/27 12:00 a.m.10 views

CVE-2026-37067

CVE-2026-37067 is an incorrect access control flaw in the file /vfm-admin/admin-panel/view/save-cvs.php of Veno File Manager Project 4.4.9 . An unauthenticated attacker can send a specially crafted POST request to extract all application logs from a chosen date forward, resulting in a low confide...

5.3CVSS5.3AI score0.00244EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2009/06/26 12:00 a.m.18 views

OCS Inventory NG < 1.02.1 Information Disclosure Vulnerability - Active Check

OCS Inventory NG is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5CVSS5.8AI score0.03195EPSS
SaveExploits2References2
OSV
OSV
added 2009/06/22 8:30 p.m.8 views

DEBIAN-CVE-2009-2166

Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter...

5CVSS6.9AI score0.03195EPSS
SaveExploits2References1
OSV
OSV
added 2009/06/22 8:30 p.m.24 views

UBUNTU-CVE-2009-2166

Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter...

5CVSS6AI score0.03195EPSS
SaveExploits2References2
Debian CVE
Debian CVE
added 2009/06/22 8:00 p.m.48 views

CVE-2009-2166

Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter...

5CVSS6.4AI score0.03195EPSS
SaveExploits2
zdt
zdt
added 2009/06/03 12:00 a.m.23 views

OCS Inventory NG 1.02 Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ========================================================== OCS Inventory NG 1.02 Remote File Disclosure Vulnerability ========================================================== OCS Inventory NG - Directory Traversal May 30 2009 Product Ope...

7.1AI score
SaveExploits0
Rows per page
Query Builder