Lucene search
K

2037 matches found

Vulnrichment
Vulnrichment
added 2025/06/16 11:0 a.m.7 views

CVE-2025-4748 Absolute path traversal in zip:unzip/1,2

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Erlang OTP stdlib modules allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2,...

4.8CVSS7.1AI score0.00305EPSS
Exploits0References8
OSV
OSV
added 2025/06/16 11:0 a.m.1 views

EEF-CVE-2025-4748 Absolute path traversal in zip:unzip/1,2

Summary Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Erlang OTP stdlib modules allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1,...

4.8CVSS6.6AI score0.00305EPSS
Exploits0References7
Cvelist
Cvelist
added 2025/06/16 11:0 a.m.25 views

CVE-2025-4748 Absolute path traversal in zip:unzip/1,2

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Erlang OTP stdlib modules allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2,...

4.8CVSS0.00305EPSS
Exploits0References8
FreeBSD
FreeBSD
added 2025/06/16 12:0 a.m.5 views

Erlang - Absolute Path in Zip Module

https://github.com/erlang/otp/security/advisories/GHSA-9g37-pgj9-wrhc reports: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Erlang OTP stdlib modules allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program...

4.8CVSS6.9AI score0.00305EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/06/12 6:10 p.m.4 views

CVE-2025-36574

Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Unauthorized access...

8.2CVSS8.1AI score0.02623EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/06/12 10:13 a.m.3 views

CVE-2025-40662

Absolute path disclosure vulnerability in DM Corporative CMS. This vulnerability allows an attacker to view the contents of webroot/file, if navigating to a non-existent file...

6.9CVSS6.2AI score0.00307EPSS
Exploits0References1
NVD
NVD
added 2025/06/10 6:15 p.m.7 views

CVE-2025-36574

Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Unauthorized access...

8.2CVSS0.02623EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/10 5:27 p.m.4 views

CVE-2025-36574

Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Unauthorized access...

8.2CVSS7.2AI score0.02623EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/10 5:27 p.m.10 views

CVE-2025-36574

Dell Wyse Management Suite, versions prior to WMS 5.2, contain an Absolute Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Unauthorized access...

8.2CVSS0.02623EPSS
Exploits0References1
CVE
CVE
added 2025/06/10 5:27 p.m.50 views

CVE-2025-36574

CVE-2025-36574 affects Dell Wyse Management Suite prior to 5.2. It is an Absolute Path Traversal vulnerability enabling an unauthenticated, remotely accessible attacker to cause information disclosure and unauthorized access due to improper filtering of path elements. The documented remediation i...

8.2CVSS7.2AI score0.02623EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2025/06/10 10:15 a.m.2 views

CVE-2025-40662

Absolute path disclosure vulnerability in DM Corporative CMS. This vulnerability allows an attacker to view the contents of webroot/file, if navigating to a non-existent file...

7.5CVSS5.8AI score0.00307EPSS
Exploits0References1
NVD
NVD
added 2025/06/10 10:15 a.m.7 views

CVE-2025-40662

Absolute path disclosure vulnerability in DM Corporative CMS. This vulnerability allows an attacker to view the contents of webroot/file, if navigating to a non-existent file...

7.5CVSS0.00307EPSS
Exploits0References1
CVE
CVE
added 2025/06/10 10:7 a.m.41 views

CVE-2025-40662

DM Corporative CMS suffers an absolute path disclosure vulnerability: an attacker can view the contents of webroot/file by navigating to a non-existent file. The CVE is documented with CVSS metrics (NVD/3.1: HIGH, base 7.5; CISA/4.0: MEDIUM, base 6.9) and multiple national/international feeds con...

7.5CVSS6.7AI score0.00307EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/06/10 10:7 a.m.15 views

CVE-2025-40662 Absolute path disclosure vulnerability in DM Corporative CMS

Absolute path disclosure vulnerability in DM Corporative CMS. This vulnerability allows an attacker to view the contents of webroot/file, if navigating to a non-existent file...

6.9CVSS0.00307EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/10 10:7 a.m.4 views

CVE-2025-40662 Absolute path disclosure vulnerability in DM Corporative CMS

Absolute path disclosure vulnerability in DM Corporative CMS. This vulnerability allows an attacker to view the contents of webroot/file, if navigating to a non-existent file...

6.9CVSS6.4AI score0.00307EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/25 10:16 a.m.13 views

CVE-2024-13945

Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data if administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.; NEXUS Series: through 3.; MATRIX Series: through 3...

8.4CVSS6.8AI score0.00461EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 11:40 a.m.3 views

CVE-2025-24611

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Smackcoders Inc., WP Ultimate Exporter wp-ultimate-exporter allows Absolute Path Traversal.This issue affects WP Ultimate Exporter: from n/a through = 2.9...

4.9CVSS7.2AI score0.00464EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2025/05/23 10:26 a.m.524 views

Exploit for CVE-2025-46822

CVE-2025-46822 Unauthenticated Arbitrary File Read via Absolu...

8.7CVSS7.1AI score0.06841EPSS
Exploits4
NVD
NVD
added 2025/05/23 10:15 a.m.13 views

CVE-2024-13945

Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data if administrator credentials become compromised. This issue affects ASPECT-Enterprise: through 3.; NEXUS Series: through 3.; MATRIX Series: through 3...

8.4CVSS0.00461EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:16 a.m.2 views

CVE-2024-33620

Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker...

8.6CVSS6.9AI score0.00306EPSS
Exploits0References1
Rows per page
Query Builder