Lucene search
+L

2476 matches found

NVD
NVD
•added 2025/08/22 12:15 p.m.•19 views

CVE-2025-9257

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS0.00551EPSS
SaveExploits0References2
NVD
NVD
•added 2025/08/22 12:15 p.m.•21 views

CVE-2025-9259

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS0.00551EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/08/22 12:15 p.m.•20 views

CVE-2025-9258

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS5.9AI score0.00551EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/08/22 12:15 p.m.•19 views

CVE-2025-9256

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS5.9AI score0.00551EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/08/22 11:46 a.m.•24 views

CVE-2025-9259 Uniong|WebITR - Arbitrary File Reading through Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS0.00551EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/08/22 11:46 a.m.•8 views

CVE-2025-9259 Uniong|WebITR - Arbitrary File Reading through Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS6.8AI score0.00551EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/08/22 11:43 a.m.•22 views

CVE-2025-9258 Uniong|WebITR - Arbitrary File Reading through Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS0.00551EPSS
SaveExploits0References2
CVE
CVE
•added 2025/08/22 11:43 a.m.•41 views

CVE-2025-9258

CVE-2025-9258 concerns WebITR (Uniong). The vulnerability is an Arbitrary File Reading via an Absolute Path Traversal flaw in WebITR, allowing remote attackers with regular privileges to download arbitrary system files. Connected sources provide details on affected product (WebITR by Uniong) and ...

7.1CVSS7.4AI score0.00551EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/08/22 11:41 a.m.•21 views

CVE-2025-9257 Uniong|WebITR - Arbitrary File Reading through Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS0.00551EPSS
SaveExploits0References2
CVE
CVE
•added 2025/08/22 11:41 a.m.•39 views

CVE-2025-9257

CVE-2025-9257 involves WebITR by Uniong, which is vulnerable to an Arbitrary File Reading via Absolute Path Traversal . The issue affects the WebITR component and allows a remote attacker with regular privileges to perform a path traversal over the network to download arbitrary system files. The ...

7.1CVSS7.4AI score0.00551EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/08/22 11:41 a.m.•10 views

CVE-2025-9257 Uniong|WebITR - Arbitrary File Reading through Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS6.8AI score0.00551EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/08/22 11:34 a.m.•31 views

CVE-2025-9256 Uniong|WebITR - Arbitrary File Reading through Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS0.00551EPSS
SaveExploits0References2
CVE
CVE
•added 2025/08/22 11:34 a.m.•43 views

CVE-2025-9256

CVE-2025-9256 affects WebITR (Uniong). An Arbitrary File Reading via Absolute Path Traversal allows remote attackers with regular privileges to download arbitrary system files. Exploitation vectors are network-based with low complexity per CVSS data; impact is high confidentiality. The provided d...

7.1CVSS7.4AI score0.00551EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/08/22 12:00 a.m.•21 views

PT-2025-34494

Name of the Vulnerable Software and Affected Versions: Tableau Server versions prior to 2025.1.3 Tableau Server versions prior to 2024.2.12 Tableau Server versions prior to 2023.3.19 Description: An improper input validation issue exists in the tabdoc api - create-data-source-from-file-upload...

8.5CVSS6.5AI score0.00215EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/08/22 12:00 a.m.•22 views

Uniong WebITR 安全漏洞

Uniong WebITR is an online time and attendance system from China Kaifa Uniong. A security vulnerability exists in Uniong WebITR that stems from vulnerability to absolute path traversal attacks, which could lead to a remote attacker downloading arbitrary system files...

7.1CVSS6.9AI score0.00551EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/08/22 12:00 a.m.•24 views

PT-2025-34343

Name of the Vulnerable Software and Affected Versions: WebITR versions affected versions not specified Description: WebITR developed by Uniong is susceptible to an arbitrary file reading issue. This allows remote attackers with regular privileges to exploit an Absolute Path Traversal flaw to...

7.1CVSS7.1AI score0.00551EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/22 12:00 a.m.•11 views

CVE-2025-9256: Absolute Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS6AI score0.00551EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/22 12:00 a.m.•7 views

CVE-2025-52451: Improper Input Validation

Improper Input Validation vulnerability in Salesforce Tableau Server on Windows, Linux tabdoc api - create-data-source-from-file-upload modules allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19...

8.5CVSS5.8AI score0.00215EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/22 12:00 a.m.•15 views

Salesforce Tableau Server 安全漏洞

Salesforce Tableau Server is a data visualization and analytics platform from Salesforce, Inc. A security vulnerability exists in Salesforce Tableau Server versions prior to 2025.1.3, prior to 2024.2.12, and prior to 2023.3.19, which stems from an arbitrary file upload that could lead to absolute...

7.3CVSS6.7AI score0.00285EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/22 12:00 a.m.•7 views

CVE-2025-26498: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux establish-connection-no-undo modules allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19...

7.3CVSS5.8AI score0.00285EPSS
SaveExploits0References1
Rows per page
Query Builder