5033 matches found
CVE-2022-23447
An improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability CWE-22 in FortiExtender management interface 7.0.0 through 7.0.3, 4.2.0 through 4.2.4, 4.1.1 through 4.1.8, 4.0.0 through 4.0.2, 3.3.0 through 3.3.2, 3.2.1 through 3.2.3, 5.3 all versions may allow an...
Path traversal
An improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability CWE-22 in FortiExtender management interface 7.0.0 through 7.0.3, 4.2.0 through 4.2.4, 4.1.1 through 4.1.8, 4.0.0 through 4.0.2, 3.3.0 through 3.3.2, 3.2.1 through 3.2.3, 5.3 all versions may allow an...
CVE-2022-23447
An improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability CWE-22 in FortiExtender management interface 7.0.0 through 7.0.3, 4.2.0 through 4.2.4, 4.1.1 through 4.1.8, 4.0.0 through 4.0.2, 3.3.0 through 3.3.2, 3.2.1 through 3.2.3, 5.3 all versions may allow an...
CVE-2022-23447
Fortinet FortiExtender contains a Path Traversal (CWE-22) vulnerability in the management interface. Multiple versions are affected, including 7.0.0–7.0.3, 4.2.0–4.2.4, 4.1.1–4.1.8, 4.0.0–4.0.2, 3.3.0–3.3.2, 3.2.1–3.2.3, and 5.3. An unauthenticated, remote attacker could retrieve arbitrary files ...
Milesight MilesightVPN server.js start directory traversal vulnerability
Talos Vulnerability Report TALOS-2023-1702 Milesight MilesightVPN server.js start directory traversal vulnerability July 6, 2023 CVE Number CVE-2023-23907 SUMMARY A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-crafted network...
Milesight UR32L luci2-io file-export mib directory traversal vulnerability
Talos Vulnerability Report TALOS-2023-1695 Milesight UR32L luci2-io file-export mib directory traversal vulnerability July 6, 2023 CVE Number CVE-2023-23547 SUMMARY A directory traversal vulnerability exists in the luci2-io file-export mib functionality of Milesight UR32L v32.3.0.5. A specially...
PT-2023-25828
Name of the Vulnerable Software and Affected Versions Bitcoin Core version 22 Description The issue is related to memory management and protection in Bitcoin Core, allowing attackers to modify the stored sending address within the app's memory. This could potentially enable them to redirect Bitco...
CVE-2023-34337
creationtimestamp| type| source ---|---|--- 2023-07-05 22:22:08+00:00| seen| https://t.me/cibsecurity/66003...
Tenable Nessus < 10.5.3 Multiple Vulnerabilities (TNS-2023-22)
According to its self-reported version, the Tenable Nessus application running on the remote host is prior to 10.5.3. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-22 advisory. - Nessus leverages third-party software to help provide underlying functionality...
SUSE SLES15 Security Update : kernel (Live Patch 22 for SLE 15 SP3) (SUSE-SU-2023:2741-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2741-1 advisory. This update for the Linux Kernel 5.3.18-1503005987 fixes several issues. The following security issues were fixed: - CVE-2022-4744: Fixed...
CVE-2023-35947
Gradle is a build tool with a focus on build automation and support for multi-language development. In affected versions when unpacking Tar archives, Gradle did not check that files could be written outside of the unpack location. This could lead to important files being overwritten anywhere the...
CVE-2023-35947
Gradle is a build tool with a focus on build automation and support for multi-language development. In affected versions when unpacking Tar archives, Gradle did not check that files could be written outside of the unpack location. This could lead to important files being overwritten anywhere the...
CVE-2023-35947
CVE-2023-35947 affects Gradle, a build tool. The vulnerability arises when unpacking Tar archives: Gradle did not prevent path traversal, allowing potential writes outside the unpack directory and, in reads from a Tar entry, possible disclosure of sensitive files. This is commonly referred to as ...
CVE-2023-35947 Path traversal vulnerabilities in handling of Tar archives in Gradle
Gradle is a build tool with a focus on build automation and support for multi-language development. In affected versions when unpacking Tar archives, Gradle did not check that files could be written outside of the unpack location. This could lead to important files being overwritten anywhere the...
CVE-2023-21186
creationtimestamp| type| source ---|---|--- 2023-06-28 22:13:27+00:00| seen| https://t.me/cibsecurity/65651...
JVN#97127032: WordPress Plugin "Snow Monkey Forms" vulnerable to directory traversal
WordPress Plugin "Snow Monkey Forms" provided by Monkey Wrench Inc. contains a directory traversal vulnerability CWE-22. Impact Arbitrary files on the server may be deleted by a remote attacker. Solution Update the plugin Update the plugin according to the information provided by the developer...
CVE-2023-32404
creationtimestamp| type| source ---|---|--- 2023-06-23 22:39:44+00:00| seen| https://t.me/cibsecurity/65482...
CVE-2023-36243
creationtimestamp| type| source ---|---|--- 2023-06-22 22:32:14+00:00| seen| https://t.me/cibsecurity/65431...
webexhibits.org Cross Site Scripting vulnerability OBB-3458632
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...