Lucene search
+L

2133 matches found

Vulnrichment
Vulnrichment
added 2022/09/22 1:32 p.m.8 views

CVE-2022-40443

An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /one/siteinfo.php...

6.5AI score0.02104EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/09/22 12:0 a.m.8 views

ZZCMS 路径遍历漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. An information disclosure vulnerability exists in ZZCMS 2022, which stems from the program's inadequate protection of sensitive information, and can be exploited by an attacker to send a request to "/admin/index php?Server" to...

5.3CVSS6.2AI score0.00872EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/09/19 4:15 p.m.3 views

CVE-2022-40715

An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily...

6.5CVSS5.9AI score0.01083EPSS
SaveExploits0References2
Prion
Prion
added 2022/09/19 4:15 p.m.25 views

Path traversal

An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily...

4CVSS6.2AI score0.01083EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/09/19 3:52 p.m.75 views

CVE-2022-40715

Summary : CVE-2022-40715 affects Nokia 1350 OMS (R14.2). An Absolute Path Traversal vulnerability exists in a specific endpoint exploitable via the logfile parameter, allowing a remote authenticated attacker to read arbitrary files on the filesystem. The issue is centered on a vulnerable endpoint...

6.5CVSS6.1AI score0.01083EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/09/09 12:0 a.m.11 views

SAMSUNG Smart Switch PC 代码问题漏洞

SAMSUNG Smart Switch PC is a Windows software from Samsung South Korea. It is used for data transfer. SAMSUNG Smart Switch PC suffers from a DLL hijacking vulnerability that originates when a process attempts to load a DLL without specifying the absolute path to the DLL. An attacker can exploit...

7.8CVSS7.4AI score0.00219EPSS
SaveExploits0References3
NVD
NVD
added 2022/09/05 4:15 p.m.32 views

CVE-2022-39838

Systematic FIX Adapter ALFAFX 2.4.0.25 13/09/2017 allows remote file inclusion via a UNC share pathname, and also allows absolute path traversal to local pathnames...

8.6CVSS0.01659EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2022/09/05 3:39 p.m.47 views

CVE-2022-39838

Systematic FIX Adapter ALFAFX 2.4.0.25 13/09/2017 allows remote file inclusion via a UNC share pathname, and also allows absolute path traversal to local pathnames...

8.5AI score0.01659EPSS
SaveExploits2References3
GithubExploit
GithubExploit
added 2022/09/05 2:21 p.m.11 views

Exploit for Path Traversal in Systematicalpha Systematic_Fix_Adapter_Firmware

CVE-2022-39838 Suggested description Systematica FIX Adap...

8.6CVSS9AI score0.01659EPSS
SaveExploits2
CNNVD
CNNVD
added 2022/09/05 12:0 a.m.8 views

Systematic Alpha Management FIX Adapter 路径遍历漏洞

Systematic Alpha Management FIX Adapter is an adapter from Systematic Alpha Management, USA. A security vulnerability exists in Systematic Alpha Management FIX Adapter ALFAFX version 2.4.0.25 13/09/2017, which stems from a vulnerability that allows remote files to be included via UNC shared...

8.6CVSS7.9AI score0.01659EPSS
SaveExploits2References4
OpenVAS
OpenVAS
added 2022/08/12 12:0 a.m.40 views

WinRAR <= 5.61 Absolute Path Traversal Vulnerability

WinRAR is prone to an absolute path traversal vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

7.8CVSS7.8AI score0.96274EPSS
SaveExploits14References2
OSV
OSV
added 2022/07/13 3:43 p.m.23 views

GHSA-7488-6X3R-23W5 Ganga allows absolute path traversal

The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS9.3AI score0.01613EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
added 2022/07/13 3:43 p.m.27 views

Ganga allows absolute path traversal

The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS8.9AI score0.01613EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2022/07/12 12:0 a.m.34 views

GHSA-QP72-96P2-G644 Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS9.4AI score0.01209EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.5 views

CVE-2022-31583

The sravaniboinepelli/AutomatedQuizEval repository through 2020-04-27 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01323EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.4 views

CVE-2022-31585

The umeshpatil-dev/Homeinternet repository through 2020-08-28 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01272EPSS
SaveExploits1References2
OSV
OSV
added 2022/07/11 1:15 a.m.6 views

CVE-2022-31576

The heidi-luong1109/shackerpanel repository through 2021-05-25 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01323EPSS
SaveExploits1References1
OSV
OSV
added 2022/07/11 1:15 a.m.8 views

CVE-2022-31586

The unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01272EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.5 views

CVE-2022-31580

The sanojtharindu/caretakerr-api repository through 2021-05-17 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01323EPSS
SaveExploits1References2
OSV
OSV
added 2022/07/11 1:15 a.m.7 views

CVE-2022-31579

The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01202EPSS
SaveExploits0References1
Rows per page
Query Builder