Lucene search
+L

1439 matches found

RedhatCVE
RedhatCVE
added 2022/11/22 8:56 p.m.40 views

CVE-2022-4123

A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality...

3.1CVSS3.3AI score0.00244EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2022/09/22 1:32 p.m.9 views

CVE-2022-40443

An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /one/siteinfo.php...

6.5AI score0.02224EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/09/19 4:15 p.m.4 views

CVE-2022-40715

An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily...

6.5CVSS5.9AI score0.01245EPSS
SaveExploits0References2
Prion
Prion
added 2022/09/19 4:15 p.m.28 views

Path traversal

An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily...

4CVSS6.2AI score0.01245EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/09/19 3:52 p.m.87 views

CVE-2022-40715

Summary : CVE-2022-40715 affects Nokia 1350 OMS (R14.2). An Absolute Path Traversal vulnerability exists in a specific endpoint exploitable via the logfile parameter, allowing a remote authenticated attacker to read arbitrary files on the filesystem. The issue is centered on a vulnerable endpoint...

6.5CVSS6.1AI score0.01245EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2022/09/05 4:15 p.m.34 views

CVE-2022-39838

Systematic FIX Adapter ALFAFX 2.4.0.25 13/09/2017 allows remote file inclusion via a UNC share pathname, and also allows absolute path traversal to local pathnames...

8.6CVSS0.01901EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2022/09/05 3:39 p.m.50 views

CVE-2022-39838

Systematic FIX Adapter ALFAFX 2.4.0.25 13/09/2017 allows remote file inclusion via a UNC share pathname, and also allows absolute path traversal to local pathnames...

8.5AI score0.01901EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2022/09/05 12:00 a.m.11 views

Systematic Alpha Management FIX Adapter 路径遍历漏洞

Systematic Alpha Management FIX Adapter is an adapter from Systematic Alpha Management, USA. A security vulnerability exists in Systematic Alpha Management FIX Adapter ALFAFX version 2.4.0.25 13/09/2017, which stems from a vulnerability that allows remote files to be included via UNC shared...

8.6CVSS7.9AI score0.01901EPSS
SaveExploits2References4
OpenVAS
OpenVAS
added 2022/08/12 12:00 a.m.54 views

WinRAR <= 5.61 Absolute Path Traversal Vulnerability

WinRAR is prone to an absolute path traversal vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

7.8CVSS7.8AI score0.96274EPSS
SaveExploits14References2
OSV
OSV
added 2022/07/13 3:43 p.m.27 views

GHSA-7488-6X3R-23W5 Ganga allows absolute path traversal

The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS9.3AI score0.01648EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
added 2022/07/13 3:43 p.m.28 views

Ganga allows absolute path traversal

The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS8.9AI score0.01648EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2022/07/12 12:00 a.m.37 views

GHSA-QP72-96P2-G644 Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS9.4AI score0.01245EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.6 views

CVE-2022-31582

The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01352EPSS
SaveExploits1References2
OSV
OSV
added 2022/07/11 1:15 a.m.12 views

CVE-2022-31586

The unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01299EPSS
SaveExploits1References1
OSV
OSV
added 2022/07/11 1:15 a.m.10 views

CVE-2022-31584

The stonethree/s3label repository through 2019-08-14 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01352EPSS
SaveExploits1References1
OSV
OSV
added 2022/07/11 1:15 a.m.9 views

CVE-2022-31582

The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01352EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.7 views

CVE-2022-31583

The sravaniboinepelli/AutomatedQuizEval repository through 2020-04-27 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01352EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.10 views

CVE-2022-31585

The umeshpatil-dev/Homeinternet repository through 2020-08-28 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01299EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.7 views

CVE-2022-31580

The sanojtharindu/caretakerr-api repository through 2021-05-17 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01352EPSS
SaveExploits1References2
OSV
OSV
added 2022/07/11 1:15 a.m.11 views

CVE-2022-31580

The sanojtharindu/caretakerr-api repository through 2021-05-17 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01352EPSS
SaveExploits1References1
Rows per page
Query Builder