5038 matches found
Path traversal
An improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability CWE-22 in FortiWeb management interface 6.4.1 and below, 6.3.15 and below, 6.2.x, 6.1.x, 6.0.x, 5.9.x and 5.8.x may allow an authenticated attacker to perform an arbitrary file and directory deletion in...
CVE-2021-42753
CVE-2021-42753 describes a path traversal vulnerability in the FortiWeb management interface that may allow an authenticated attacker to perform arbitrary file and directory deletions in the device filesystem. Affected product scope includes FortiWeb versions 6.4.1 and below, 6.3.15 and below, an...
CVE-2021-42753
An improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability CWE-22 in FortiWeb management interface 6.4.1 and below, 6.3.15 and below, 6.2.x, 6.1.x, 6.0.x, 5.9.x and 5.8.x may allow an authenticated attacker to perform an arbitrary file and directory deletion in...
CVE-2021-42753
An improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability CWE-22 in FortiWeb management interface 6.4.1 and below, 6.3.15 and below, 6.2.x, 6.1.x, 6.0.x, 5.9.x and 5.8.x may allow an authenticated attacker to perform an arbitrary file and directory deletion in...
FortiWeb - arbitrary file/directory deletion
An improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability CWE-22 in FortiWeb management interface may allow an authenticated attacker to perform an arbitrary file and directory deletion in the device filesystem...
CVE-2021-22810
creationtimestamp| type| source ---|---|--- 2022-01-28 22:22:07+00:00| seen| https://t.me/cibsecurity/36484...
CISA Adds Eight Known Exploited Vulnerabilities to Catalog
CISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types...
CVE-2022-23022
creationtimestamp| type| source ---|---|--- 2022-01-25 22:19:03+00:00| seen| https://t.me/cibsecurity/36266...
br.goodwe.com Cross Site Scripting vulnerability OBB-2343402
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
comune.ussana.ca.it Cross Site Scripting vulnerability OBB-2343291
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
uhrenarmband-versand.de Cross Site Scripting vulnerability OBB-2343277
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-46242
creationtimestamp| type| source ---|---|--- 2022-01-22 00:13:49+00:00| seen| https://t.me/cibsecurity/36085...
CVE-2022-22551
creationtimestamp| type| source ---|---|--- 2022-01-22 00:13:41+00:00| seen| https://t.me/cibsecurity/36078...
CVE-2022-22553
creationtimestamp| type| source ---|---|--- 2022-01-22 00:13:38+00:00| seen| https://t.me/cibsecurity/36076...
CVE-2021-46236
creationtimestamp| type| source ---|---|--- 2022-01-22 00:13:37+00:00| seen| https://t.me/cibsecurity/36075...
CVE-2022-22552
creationtimestamp| type| source ---|---|--- 2022-01-22 00:13:34+00:00| seen| https://t.me/cibsecurity/36072...
CVE-2021-46313
creationtimestamp| type| source ---|---|--- 2022-01-22 00:13:31+00:00| seen| https://t.me/cibsecurity/36070...
CVE-2021-46238
creationtimestamp| type| source ---|---|--- 2022-01-22 00:13:30+00:00| seen| https://t.me/cibsecurity/36069...
CISA Adds 13 Known Exploited Vulnerabilities to Catalog
CISA has added 13 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types and...