13 matches found
CVE-2024-13195
A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been classified as critical. This affects the function getHtml of the file src/main/java/org/zdd/bookstore/rawl/HttpUtil.java. The manipulation of the argument url leads to server-side request forgery. It is possible to initia...
CVE-2019-13195
The web application of some Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 was vulnerable to path traversal, allowing an unauthenticated user to retrieve arbitrary files, or check if files or folders existed within the file system...
CVE-2024-13195
A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been classified as critical. This affects the function getHtml of the file src/main/java/org/zdd/bookstore/rawl/HttpUtil.java. The manipulation of the argument url leads to server-side request forgery. It is possible to initia...
CVE-2024-13195
creationtimestamp| type| source ---|---|--- 2025-01-08 23:38:02+00:00| seen| https://infosec.exchange/users/cve/statuses/113795365742691993 2025-01-09 00:13:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/862 2025-01-09 00:16:14+00:00| seen|...
CVE-2024-13195 donglight bookstore电商书城系统说明 HttpUtil.java getHtml server-side request forgery
A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been classified as critical. This affects the function getHtml of the file src/main/java/org/zdd/bookstore/rawl/HttpUtil.java. The manipulation of the argument url leads to server-side request forgery. It is possible to initia...
CVE-2024-13195 donglight bookstore电商书城系统说明 HttpUtil.java getHtml server-side request forgery
A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been classified as critical. This affects the function getHtml of the file src/main/java/org/zdd/bookstore/rawl/HttpUtil.java. The manipulation of the argument url leads to server-side request forgery. It is possible to initia...
CVE-2020-13195
CVE-2020-13195 is rejected/not used and does not represent an active vulnerability entry.
CVE-2019-13195
The CVE-2019-13195 entry describes a path traversal vulnerability in the web application of Kyocera ECOSYS M5526CDW (e.g., 2R7_2000.001.701). The vulnerability allows an unauthenticated user to retrieve arbitrary files or check for file/folder existence outside a restricted directory due to insuf...
CVE-2018-13195
CVE-2018-13195 concerns Cranoo (CRN) Ethereum token. The mintToken function in its smart contract has an integer overflow that enables the contract owner to set any user’s balance to an arbitrary value. Documents show this as a vulnerability in the Cranoo token implementation; no exploitation det...
CVE-2017-13195
CVE-2017-13195 affects Android Media Framework (ihevcd_parse_headers.c: ihevcd_parse_sps). The issue arises when several parameter values could be negative, causing negative indexes and an infinite loop, enabling remote denial of service of a privileged system process with no privileges and no us...
Fedora Core 11 FEDORA-2009-13195 (merkaartor)
The remote host is missing an update to merkaartor announced via advisory FEDORA-2009-13195. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...
Fedora Core 11 FEDORA-2009-13195 (merkaartor)
The remote host is missing an update to merkaartor announced via advisory FEDORA-2009-13195. OpenVAS Vulnerability Test $Id: fcore200913195.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-13195 merkaartor Authors: Thomas Reinke Copyright: Copyright ...