120 matches found
CVE-2021-3924
grav is vulnerable to Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...
CVE-2021-3924
CVE-2021-3924 affects Grav (getgrav/grav) and is caused by an improper limitation of a pathname to a restricted directory (path traversal). The vulnerability is in the path handling logic of Grav, allowing access to files or directories outside the intended scope. Multiple connected sources confi...
CVE-2021-3924 Path Traversal in getgrav/grav
grav is vulnerable to Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...
CVE-2017-3924
This CVE entry is rejected/not used; the ID was in a CNA pool and not assigned to issues.
CVE-2020-3924
DVR firmware in TAT-76 and TAT-77 series of products, provided by TONNET do not properly verify patch files. Attackers can inject a specific command into a patch file and gain access to the system...
CVE-2020-3924
CVE-2020-3924 concerns TONNET DVR firmware for the TAT-76 and TAT-77 series, where patch files are not properly verified. The vulnerability enables an attacker to inject a specific command into a patch file and gain access to the system. The available documents do not provide exploitation details...
Foxit Reader Use After Free (CVE-2018-14304; CVE-2018-14300; CVE-2018-17682; CVE-2018-3924)
A use after free vulnerability exists in Foxit Reader. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
MikroTik RouterOS Unauthenticated Intermediary
The remote networking device is running a version of MikroTik RouterOS vulnerable to an unauthenticated intermediary vulnerability. Therefore, an unauthenticated remote attacker could use the MikroTik router to proxy arbitrary traffic or bypass the router's firewall. %NASLMINLEVEL 70300 C Tenable...
Ubuntu 18.04 LTS : mod_auth_mellon vulnerabilities (USN-3924-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3924-1 advisory. It was discovered that modauthmellon incorrectly handled certain requests. An attacker could possibly use this issue to redirect a user to a malicious UR...
MikroTik RouterOS 6.43.12 (stable) 6.42.12 (long-term) - Firewall and NAT Bypass
MikroTik RouterOS 6.43.12 stable 6.42.12 long-term - Firewall and NAT Bypass CVE-2019-3924 A remote, unauthenticated attacker can proxy traffic through RouterOS via probes sent to the agent binary. This PoC demonstrates how to exploit a LAN host from the WAN. A video demonstrating the attack can ...
MikroTik RouterOS < 6.43.12 (stable) / < 6.42.12 (long-term) - Firewall and NAT Bypass
CVE-2019-3924 A remote, unauthenticated attacker can proxy traffic through RouterOS via probes sent to the agent binary. This PoC demonstrates how to exploit a LAN host from the WAN. A video demonstrating the attack can be found here: https://www.youtube.com/watch?v=CxyOtsNVgFg A Tenable Research...
MikroTik RouterOS < 6.43.12 (stable) / < 6.42.12 (long-term) - Firewall and NAT Bypass
MikroTik RouterOS 6.43.12 stable / 6.42.12 long-term - Firewall and NAT Bypass CVE-2019-3924 A remote, unauthenticated attacker can proxy traffic through RouterOS via probes sent to the agent binary. This PoC demonstrates how to exploit a LAN host from the WAN. A video demonstrating the attack ca...
CVE-2019-3924
creationtimestamp| type| source ---|---|--- 2019-02-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46444 2019-02-21 05:45:40+00:00| seen| Telegram/2E2dy9OYYaEYmhdkxDpQcX-ZNfT83PbwDTTfo0Aql9rM 2019-02-22 02:26:30+00:00| published-proof-of-concept|...
CVE-2019-3924
CVE-2019-3924 affects MikroTik RouterOS prior to 6.43.12 (stable) and 6.42.12 (long-term). The vulnerability lets an unauthenticated remote attacker trigger user-specified network requests to WAN and LAN clients via an intermediary flaw, enabling firewall bypass or general network scanning activi...
Foxit PhantomPDF < 8.3.7 Multiple Vulnerabilities
According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 8.3.7. It is, therefore, affected by multiple arbitrary code execution and information disclosure vulnerabilities. C Tenable Network Security, Inc...
Foxit Reader < 8.3.7 Multiple Vulnerabilities
The version of Foxit Reader installed on the remote Windows host is prior to 8.3.7. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid112059; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate"...
CVE-2018-3924
CVE-2018-3924 describes a use-after-free vulnerability in Foxit PDF Reader’s JavaScript engine affecting Foxit PDF Reader version 9.1.5096 (and related Foxit offerings). The issue allows an attacker to trigger reuse of a previously freed memory object via a specially crafted PDF document, potenti...
Foxit PhantomPDF < 9.2 Multiple Vulnerabilities
According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 9.2. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111376; scriptversion"1.7...
Foxit Reader < 9.2 Multiple Vulnerabilities
The version of Foxit Reader installed on the remote Windows host is prior to 9.2. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111377; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate",...