Lucene search
K

22 matches found

CNNVD
CNNVD
added 2025/06/21 12:0 a.m.1 views

Allegra 授权问题漏洞

Allegra is a project management software for mid-sized organizations from Allegra. An authorization issue vulnerability exists in Allegra that stems from a password recovery mechanism that relies on predictable values, which could lead to authentication bypass...

9.8CVSS9.5AI score0.49839EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/05/22 12:0 a.m.2 views

Allegra 路径遍历漏洞

Allegra is a project management software for mid-sized organizations from Allegra. A path traversal vulnerability exists in Allegra that stems from the isZipEntryValide method not properly validating a user-supplied path, which could lead to remote code execution...

8.8CVSS7.5AI score0.03057EPSS
Exploits0References2
OSV
OSV
added 2024/11/22 8:15 p.m.1 views

CVE-2024-5581

Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the unzipFile method. The...

7.2CVSS6.2AI score0.12179EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2024/11/22 8:15 p.m.0 views

CVE-2023-51646

Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can...

7.2CVSS6.3AI score0.00728EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2024/11/22 8:15 p.m.0 views

CVE-2023-51643

Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be...

7.2CVSS6.3AI score0.0154EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2024/11/22 8:15 p.m.2 views

CVE-2023-51642

Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a...

9.8CVSS6.3AI score0.06281EPSS
Exploits0References3
EUVD
EUVD
added 2024/11/22 8:5 p.m.1 views

EUVD-2024-47120

Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7.2CVSS7.4AI score0.11007EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.2 views

Allegra 信任管理问题漏洞

Allegra is a project management software for mid-sized organizations from Allegra. A trust management issue vulnerability exists in Allegra that stems from the inclusion of a hard-coded credential that leads to an authentication bypass vulnerability...

9.8CVSS9.5AI score0.00261EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.1 views

Allegra 访问控制错误漏洞

Allegra is a project management software for mid-sized organizations from Allegra. An access control error vulnerability exists in Allegra that stems from the SiteConfigAction feature containing an improperly access controlled remote code execution vulnerability...

9.8CVSS9.8AI score0.02414EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.2 views

Allegra 代码问题漏洞

Allegra is a project management software for mid-sized organizations from Allegra. A code issue vulnerability exists in Allegra that stems from the renderFieldMatch feature containing an untrusted data deserialization remote code execution vulnerability...

9.8CVSS9.8AI score0.06281EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.0 views

Allegra 路径遍历漏洞

Allegra is a project management software for mid-sized organizations from Allegra. A path traversal vulnerability exists in Allegra, which stems from the getFileContentAsString function containing a directory traversal information disclosure vulnerability...

7.5CVSS7.3AI score0.01266EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.3 views

Allegra 路径遍历漏洞

Allegra is a project management software for mid-sized organizations from Allegra. A path traversal vulnerability exists in Allegra that stems from the saveFile feature containing a directory traversal remote code execution vulnerability...

9.8CVSS9.8AI score0.06005EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.2 views

Allegra 路径遍历漏洞

Allegra is a project management software for mid-sized organizations from Allegra. Allegra suffers from a path traversal vulnerability that stems from the extarctZippedFile feature containing a directory traversal remote code execution vulnerability...

7.2CVSS7.6AI score0.01783EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.1 views

Allegra 路径遍历漏洞

Allegra is a project management software for mid-sized organizations from Allegra. Allegra suffers from a path traversal vulnerability that stems from the serveMathJaxLibraries feature containing a directory traversal information disclosure vulnerability...

7.5CVSS7.3AI score0.02489EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.1 views

Allegra 代码问题漏洞

Allegra is a project management software for mid-sized organizations from Allegra, Inc. Allegra suffers from a code issue vulnerability that stems from a lack of proper validation of user-supplied data. An attacker can exploit the vulnerability to execute arbitrary code...

7.2CVSS7.3AI score0.05752EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.2 views

Allegra 代码问题漏洞

Allegra is a project management software for mid-sized organizations from Allegra, Inc. Allegra suffers from a code issue vulnerability that stems from a lack of proper validation of user-supplied data. An attacker can exploit the vulnerability to execute arbitrary code...

7.2CVSS7.3AI score0.11007EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.1 views

Allegra 代码问题漏洞

Allegra is a project management software for mid-sized organizations from Allegra. A code issue vulnerability exists in Allegra that stems from the loadFieldMatch feature containing an untrusted data deserialization remote code execution vulnerability...

9.8CVSS9.8AI score0.06281EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.1 views

Allegra 路径遍历漏洞

Allegra is a project management software for mid-sized organizations from Allegra. A path traversal vulnerability exists in Allegra, which stems from the uploadFile feature containing a directory traversal remote code execution vulnerability...

7.2CVSS7.5AI score0.0154EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.1 views

Allegra 路径遍历漏洞

Allegra is a project management software for mid-sized organizations from Allegra. Allegra suffers from a path traversal vulnerability that stems from the unzipFile feature containing a directory traversal remote code execution vulnerability...

7.2CVSS7.6AI score0.01783EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/02/09 12:0 a.m.1 views

PT-2024-19455 · Allegra · Allegra

Name of the Vulnerable Software and Affected Versions: Allegra affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism can ...

7.8AI score
Exploits0References1
Rows per page
Query Builder