Lucene search
+L

2478 matches found

Cvelist
Cvelist
•added 2024/02/14 1:12 a.m.•55 views

CVE-2024-25125 Absolute path traversal vulnerability in digdag server

Digdag is an open source tool that to build, run, schedule, and monitor complex pipelines of tasks across various platforms. Treasure Data's digdag workload automation system is susceptible to a path traversal vulnerability if it's configured to store log files locally. This issue may lead to...

5.3CVSS5.4AI score0.29646EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/02/14 1:12 a.m.•15 views

CVE-2024-25125 Absolute path traversal vulnerability in digdag server

Digdag is an open source tool that to build, run, schedule, and monitor complex pipelines of tasks across various platforms. Treasure Data's digdag workload automation system is susceptible to a path traversal vulnerability if it's configured to store log files locally. This issue may lead to...

5.3CVSS6.4AI score0.29646EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/02/06 12:00 a.m.•50 views

Amazon Linux 2023 : ansible-core, ansible-test (ALAS2023-2024-505)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-505 advisory. The upstream report describes this issue as follows: When installing a maliciously created Ansible role using 'ansible-galaxy role install', arbitrary files the user has access to can be...

6.3CVSS7.2AI score0.01013EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/31 12:00 a.m.•4 views

CVE-2023-5390: Absolute Path Traversal

An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC. This exploit could be used to read files from the controller that may expose limited information from the device. Honeywell recommends...

5.3CVSS8.2AI score0.0057EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2024/01/26 8:15 a.m.•16 views

CVE-2023-6919

Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal.This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C...

7.5CVSS5.8AI score0.00582EPSS
SaveExploits0References1
NVD
NVD
•added 2024/01/26 8:15 a.m.•35 views

CVE-2023-6919

Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal. This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C...

7.5CVSS7.5AI score0.00582EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2024/01/26 8:15 a.m.•19 views

CVE-2023-6919

Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal. This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C...

7.5CVSS7.1AI score0.00582EPSS
SaveExploits0References3
Prion
Prion
•added 2024/01/26 8:15 a.m.•30 views

Path traversal

Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal.This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C...

5CVSS7.2AI score0.00582EPSS
SaveExploits0References1Affected Software9
Vulnrichment
Vulnrichment
•added 2024/01/26 7:52 a.m.•9 views

CVE-2023-6919 Path Traversal in VGuard IP Camera Network Recorder

Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal. This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C...

7.5CVSS7.1AI score0.00582EPSS
SaveExploits0References2
CVE
CVE
•added 2024/01/26 7:52 a.m.•70 views

CVE-2023-6919

CVE-2023-6919 describes a Path Traversal vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard prior to version V500.0003.R008.4011.C0012.B351.C. The flaw allows an absolute path traversal via the "/.. /filedir" payload, potentially enabling access to files outside the web root. A...

7.5CVSS7.1AI score0.00582EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2024/01/26 12:00 a.m.•22 views

PT-2024-15122 · Biges Safe Life Technologies Electronics Inc · Vguard

Name of the Vulnerable Software and Affected Versions: Biges Safe Life Technologies Electronics Inc. VGuard versions prior to V500.0003.R008.4011.C0012.B351.C Description: The issue is related to a Path Traversal vulnerability, specifically an Absolute Path Traversal, which can be exploited using...

7.5CVSS7.3AI score0.00582EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/26 12:00 a.m.•9 views

CVE-2023-6919: Path Traversal: '/../filedir'

Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal. This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C...

7.5CVSS5.8AI score0.00582EPSS
SaveExploits0References4
osv_ghsa
osv_ghsa
•added 2024/01/11 3:18 p.m.•41 views

GHSA-RGRF-6MF5-M882 cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code

Impact What kind of vulnerability is it? Who is impacted? An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0 at and since 0.5.0, before 0.15.0. The vulnerability stems from a Python function,...

2.2CVSS3.4AI score0.0041EPSS
SaveExploits1References18
Github Security Blog
Github Security Blog
•added 2024/01/11 3:18 p.m.•36 views

cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code

Impact What kind of vulnerability is it? Who is impacted? An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0 at and since 0.5.0, before 0.15.0. The vulnerability stems from a Python function,...

2.8CVSS6.5AI score0.0041EPSS
SaveExploits1References18Affected Software2
Positive Technologies
Positive Technologies
•added 2024/01/11 12:00 a.m.•7 views

PT-2024-19267

Name of the Vulnerable Software and Affected Versions cdo-local-uuid version 0.4.0 case-utils versions 0.5.0 through 0.14.0 Description An information leakage vulnerability is present in the affected software. The vulnerability stems from a Python function, cdo local uuid.local uuid, and its...

2.8CVSS5.8AI score0.0041EPSS
SaveExploits1References24
Github Security Blog
Github Security Blog
•added 2023/12/28 9:30 p.m.•55 views

Ansible symlink attack vulnerability

An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path...

6.3CVSS7AI score0.01013EPSS
SaveExploits0References9Affected Software1
osv_ghsa
osv_ghsa
•added 2023/12/28 9:30 p.m.•39 views

GHSA-JPVW-P8PR-9G2X Ansible symlink attack vulnerability

An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path...

6.3CVSS6.3AI score0.01013EPSS
SaveExploits0References9
NVD
NVD
•added 2023/12/27 3:15 p.m.•23 views

CVE-2023-6190

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in İzmir Katip Çelebi University University Information Management System allows Absolute Path Traversal. This issue affects University Information Management System: before 30.11.2023...

9.8CVSS0.00757EPSS
SaveExploits0References2
Prion
Prion
•added 2023/12/27 3:15 p.m.•29 views

Input validation

Improper Input Validation vulnerability in Izmir Katip Çelebi University University Information Management System allows Absolute Path Traversal.This issue affects University Information Management System: before 30.11.2023...

7.5CVSS9.3AI score0.00757EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/27 2:36 p.m.•62 views

CVE-2023-6190

CVE-2023-6190 is an authentication-relevant path traversal vulnerability in İzmir Katip Çelebi University University Information Management System, caused by improper limitation of a pathname to a restricted directory (absolute path traversal). The NVD entry notes impact across confidentiality, i...

9.8CVSS8.4AI score0.00757EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder