Lucene search
+L

2735 matches found

CNVD
CNVD
added 2021/04/12 12:0 a.m.15 views

V8+ Terminal Security System of Beijing Falcon Security Technology Co., Ltd. has Arbitrary File Download Vulnerability

V8+ Terminal Security System is a new-generation enterprise terminal security software, which can dynamically detect, real-time process, and trace unknown threats in the user's network across the network to meet the increasingly complex needs of domestic enterprise users for security protection o...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2021/04/12 12:0 a.m.14 views

Beijing Falcon Security Technology Co., Ltd Terminal Security System 9.0 has Arbitrary File Download Vulnerability

Terminal Security System V9.0 is a terminal security management platform specially designed for the government, military industry, energy, education, medical treatment and grouped enterprises. Beijing Falcon Security Technology Co., Ltd Terminal Security System 9.0 has an arbitrary file download...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2021/04/08 12:0 a.m.4 views

Arbitrary file download vulnerability exists in the server management background of GoodView Video Conference Enterprise Edition (CNVD-2021-29146)

Shenzhen Yinpeng Cloud Computing Co., Ltd. is a domestic cloud computing products and services provider. Arbitrary file download vulnerability exists in the server management background of GoodView Video Conference Enterprise Edition, which can be exploited by attackers to obtain sensitive...

6.8AI score
SaveExploits0
OSV
OSV
added 2021/04/06 1:15 p.m.6 views

CVE-2021-28075

iKuaiOS 3.4.8 Build 202012291059 has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information...

7.5CVSS5.9AI score0.01015EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/06 1:15 p.m.12 views

CVE-2021-28075

iKuaiOS 3.4.8 Build 202012291059 has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information...

7.5CVSS0.01015EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/04/06 1:15 p.m.5 views

CVE-2021-28075

iKuaiOS 3.4.8 Build 202012291059 has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information...

7.5CVSS7.5AI score0.01015EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/04/06 12:8 p.m.23 views

CVE-2021-28075

iKuaiOS 3.4.8 Build 202012291059 has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information...

7.7AI score0.01015EPSS
SaveExploits0References1
CVE
CVE
added 2021/04/06 12:8 p.m.53 views

CVE-2021-28075

CVE-2021-28075 affects iKuaiOS 3.4.8 Build 202012291059. The vulnerability is described as an arbitrary file download that attackers could exploit to obtain sensitive information. The provided documents do not include concrete technical details about the root cause, affected components, versions ...

7.5CVSS7.5AI score0.01015EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/04/06 12:0 a.m.6 views

IKuai OS 安全漏洞

IKuai OS is an operating system from the Chinese company IKuai. It provides a set of powerful gateways, DPI-based traffic shaping, AC control, and portal authentication features that can increase capital efficiency by reducing initial installation costs. A security vulnerability exists in iKuaiOS...

7.5CVSS7.5AI score0.01015EPSS
SaveExploits0References2
OSV
OSV
added 2021/04/05 7:15 p.m.3 views

CVE-2021-24154

The Theme Editor WordPress plugin before 2.6 did not validate the GET file parameter before passing it to the downloadfile function, allowing administrators to download arbitrary files on the web server, such as /etc/passwd...

4.9CVSS5.9AI score0.01066EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/04/05 12:0 a.m.6 views

WordPress 安全漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A security vulnerability exists in the Theme...

4.9CVSS5.6AI score0.01066EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/04/04 12:0 a.m.5 views

Anhui XED Software Technology Co., Ltd. XED OA exists arbitrary file download vulnerability

Anhui XED Software Technology Co., Ltd. was established on May 16, 2008. Legal representative Ru Caifeng, the company's scope of business includes: information technology in the field of software and mobile Internet application technology development, technical consulting, technical services, clo...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2021/04/02 12:0 a.m.4 views

UFIDA U8 OA Collaboration Management Software has an arbitrary file download vulnerability

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An arbitrary file download vulnerability exists in UFIDA U8 OA Collaboration Management Software. An attacker can exploit this vulnerability to downlo...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2021/04/02 12:0 a.m.6 views

Arbitrary file download vulnerability in yycms

yycms is a movie and television system. yycms has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

7AI score
SaveExploits0
CNVD
CNVD
added 2021/04/01 12:0 a.m.6 views

YzmCMS has an arbitrary file download vulnerability

YzmCMS is a lightweight open source content management system based on YZMPHP. YzmCMS has an arbitrary file download vulnerability that can only be exploited by attacks to obtain sensitive information...

7AI score
SaveExploits0
CNVD
CNVD
added 2021/03/30 12:0 a.m.7 views

Songcms is vulnerable to arbitrary file downloads

SongCMS is a free and open source CMS based on PHP+MySQL, ASP+Access/SQL Server development, enterprise-oriented, multi-language support. Songcms has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

7AI score
SaveExploits0
CNVD
CNVD
added 2021/03/30 12:0 a.m.5 views

Qingdao Yiqi Tianchuang Management Consulting Co., Ltd Ranzhi Synergy v5.2 there are arbitrary file download vulnerabilities

Ranzhi Collaboration Management System by the customer management CRM, daily office OA, cash bookkeeping CASH, team sharing TEAM and application navigation IPS five modules, mainly for small and medium-sized teams of internal management. Qingdao Yiqi Tianchuang Management Consulting Co., Ltd. Ran...

7AI score
SaveExploits0
zdt
zdt
added 2021/03/29 12:0 a.m.29 views

Novel Boutique House-plus 3.5.1 - Arbitrary File Download Vulnerability

Exploit Title: Novel Boutique House-plus 3.5.1 - Arbitrary File Download Exploit Author: tuyiqiang Vendor Homepage: https://xiongxyang.gitee.io/ Software Link: https://gitee.com/noveldevteam/novel-plus,https://github.com/201206030/novel-plus Version: all Tested on: linux Vulnerable code:...

0.2AI score
SaveExploits0
Packet Storm
Packet Storm
added 2021/03/29 12:0 a.m.263 views

Novel Boutique House-plus 3.5.1 Arbitrary File Download

Exploit Title: Novel Boutique House-plus 3.5.1 - Arbitrary File Download Date: 27/03/2021 Exploit Author: tuyiqiang Vendor Homepage: https://xiongxyang.gitee.io/ Software Link: https://gitee.com/noveldevteam/novel-plus,https://github.com/201206030/novel-plus Version: all Tested on: linux Vulnerab...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2021/03/29 12:0 a.m.231 views

Novel Boutique House-plus 3.5.1 - Arbitrary File Download

Exploit Title: Novel Boutique House-plus 3.5.1 - Arbitrary File Download Date: 27/03/2021 Exploit Author: tuyiqiang Vendor Homepage: https://xiongxyang.gitee.io/ Software Link: https://gitee.com/noveldevteam/novel-plus,https://github.com/201206030/novel-plus Version: all Tested on: linux Vulnerab...

5.3AI score
SaveExploits0
Rows per page
Query Builder