Lucene search
K

22 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 3:50 a.m.5 views

CVE-2023-32807

In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07588360; Issue ID: ALPS07588360...

4.4CVSS6.1AI score0.00015EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:59 p.m.5 views

CVE-2022-32807

This issue was addressed with improved file handling. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to overwrite arbitrary files...

7.1CVSS6.1AI score0.00035EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/12 12:4 a.m.17 views

CVE-2025-32807

A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png and .svg or .xpm for some configurations via the icon parameter of a GET request to geticon.php...

5.3CVSS7.4AI score0.00327EPSS
Exploits0References1
OSV
OSV
added 2025/04/11 12:15 a.m.6 views

CVE-2025-32807

A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png and .svg or .xpm for some configurations via the icon parameter of a GET request to geticon.php...

5.3CVSS7AI score
Exploits0References3
NVD
NVD
added 2025/04/11 12:15 a.m.10 views

CVE-2025-32807

A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png and .svg or .xpm for some configurations via the icon parameter of a GET request to geticon.php...

5.3CVSS0.00327EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/04/10 12:0 a.m.10 views

CVE-2025-32807

A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png and .svg or .xpm for some configurations via the icon parameter of a GET request to geticon.php...

5.3CVSS0.00327EPSS
Exploits0References3
NVD
NVD
added 2024/05/06 6:15 p.m.8 views

CVE-2024-32807

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Brevo Sendinblue for WooCommerce allows Relative Path Traversal, Manipulating Web Input to File System Calls.This issue affects Sendinblue for WooCommerce: from n/a through 4.0.17...

8.5CVSS8.4AI score0.00498EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/06 5:44 p.m.16 views

CVE-2024-32807 WordPress Brevo for WooCommerce plugin <= 4.0.17 - Arbitrary File Download and Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Brevo Sendinblue for WooCommerce allows Relative Path Traversal, Manipulating Web Input to File System Calls.This issue affects Sendinblue for WooCommerce: from n/a through 4.0.17...

8.5CVSS6.8AI score0.00498EPSS
Exploits0References1
CVE
CVE
added 2024/05/06 5:44 p.m.70 views

CVE-2024-32807

CVE-2024-32807 affects Brevo (Sendinblue) for WooCommerce up to version 4.0.17. It is described as a Path Traversal vulnerability that could enable manipulation of input to file-system calls, with the Wordfence entry noting an Authenticated (Editor+) path to Arbitrary File Download and Deletion. ...

8.5CVSS6.7AI score0.00498EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/04/22 12:0 a.m.9 views

WordPress Sendinblue for WooCommerce Plugin <= 4.0.17 is vulnerable to Arbitrary File Download

Software Sendinblue for WooCommerce Type Plugin Vulnerable versions = 4.0.17 Fixed in 4.0.18 OWASP Top 10 A4: Insecure Design Classification Arbitrary File Download CVE CVE-2024-32807 Patch priority Medium CVSS severity Medium 8.5 Developer Claim ownership PSID 1a6d8c4d6ed3 Credits Yudistira Arya...

8.5CVSS6.5AI score0.00498EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2023/09/04 7:16 a.m.2 views

CVE-2023-32807

creationtimestamp| type| source ---|---|--- 2023-09-04 07:16:21+00:00| seen| https://t.me/cibsecurity/69733...

4.4CVSS4.7AI score0.00015EPSS
Exploits0References1
CVE
CVE
added 2023/09/04 2:28 a.m.50 views

CVE-2023-32807

The CVE-2023-32807 issue affects the wlan service in MediaTek-based devices, caused by an improper input validation that leads to an out-of-bounds read. This could allow local information disclosure and requires system privileges, with no user interaction needed. The vulnerability details are sup...

4.4CVSS4.3AI score0.00015EPSS
Exploits0References1Affected Software3
Circl
Circl
added 2022/09/23 10:14 p.m.2 views

CVE-2022-32807

creationtimestamp| type| source ---|---|--- 2022-09-23 22:14:03+00:00| seen| https://t.me/cibsecurity/50386...

7.1CVSS6.6AI score0.00035EPSS
Exploits0References1
OSV
OSV
added 2022/09/23 7:15 p.m.1 views

CVE-2022-32807

This issue was addressed with improved file handling. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to overwrite arbitrary files...

7.1CVSS5.8AI score0.00035EPSS
Exploits0References3
Cvelist
Cvelist
added 2022/09/23 6:59 p.m.12 views

CVE-2022-32807

This issue was addressed with improved file handling. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to overwrite arbitrary files...

7.4AI score0.00035EPSS
Exploits0References3
CVE
CVE
added 2022/09/23 6:59 p.m.94 views

CVE-2022-32807

CVE-2022-32807 affects macOS: Catalina, Big Sur (11.6.8) and Monterey (12.5). The issue arises from improper file handling, allowing an app to overwrite arbitrary files. It is tracked with a CVSS v3.1 base score of 7.1 (HIGH) with LOCAL attack vector, low attack complexity, no privileges required...

7.1CVSS7AI score0.00035EPSS
Exploits0References3Affected Software2
Vulnrichment
Vulnrichment
added 2022/09/23 6:59 p.m.5 views

CVE-2022-32807

This issue was addressed with improved file handling. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to overwrite arbitrary files...

6.3AI score0.00035EPSS
Exploits0References3
vulnersOsv
vulnersOsv
added 2021/08/05 5:0 p.m.2 views

dsframework (>=0.1.9 <=0.1.12) potentially affected by CVE-2021-32807 +1 more via zope (=5.2.0)

zope PYPI version =5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on zope and may be impacted: - dsframework =0.1.9, =0.1.12 Source cves: CVE-2021-32807, CVE-2021-32811 Source advisory: OSV:GHSA-G4GQ-J4P2-J8FR...

7.5CVSS7AI score0.03934EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2021/08/02 10:15 p.m.2 views

dsframework (>=0.1.9 <=0.1.12) potentially affected by CVE-2021-32807 +1 more via zope (=5.2.0)

zope PYPI version =5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on zope and may be impacted: - dsframework =0.1.9, =0.1.12 Source cves: CVE-2021-32807, CVE-2021-32811 Source advisory: OSV:PYSEC-2021-368...

7.5CVSS7AI score0.03934EPSS
Exploits0
Circl
Circl
added 2021/07/31 2:25 a.m.4 views

CVE-2021-32807

creationtimestamp| type| source ---|---|--- 2021-07-31 02:25:06+00:00| seen| https://t.me/cibsecurity/26641...

7.2CVSS6.9AI score0.01883EPSS
Exploits0References1
Rows per page
Query Builder