Lucene search
+L

2722 matches found

CNNVD
CNNVD
added 2025/10/14 12:0 a.m.7 views

Hewlett Packard Enterprise ArubaOS 安全漏洞

Hewlett Packard Enterprise ArubaOS HPE ArubaOS is a networked wireless operating system from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise ArubaOS HPE ArubaOS that stems from an arbitrary file download vulnerability in the CLI binary, which could le...

4.9CVSS6.6AI score0.00326EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.12 views

PT-2025-41984

Arbitrary file download vulnerabilities exist in the CLI binary of AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems. Successful exploitation could allow an authenticated malicious actor to download arbitrary files through carefully constructed exploits...

4.9CVSS6.9AI score0.00326EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.7 views

HPE AOS 安全漏洞

HPE AOS is an operating system from HPE, USA. A security vulnerability exists in HPE AOS that stems from an arbitrary file download vulnerability in the CLI binary, which could lead to an authenticated attacker downloading arbitrary files...

4.9CVSS6.6AI score0.00326EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.16 views

PT-2025-41986

Name of the Vulnerable Software and Affected Versions AOS-10 GW affected versions not specified AOS-8 Controller/Mobility Conductor affected versions not specified Description The CLI binary in AOS-10 GW and AOS-8 Controller/Mobility Conductor operating systems contains flaws that could allow an...

4.9CVSS6.4AI score0.00326EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/10/13 6:49 a.m.11 views

WordPress Error Log Viewer by BestWebSoft plugin <= 1.1.6 - Authenticated (Administrator+) Arbitrary File Read vulnerability

Authenticated Administrator+ Arbitrary File Read vulnerability discovered by Duc Manh in WordPress Plugin Error Log Viewer by BestWebSoft versions = 1.1.6...

4.9CVSS6.8AI score0.00671EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2025/10/13 12:0 a.m.61 views

WordPress Backup Bolt plugin Arbitrary File Download Vulnerability

WordPress Backup Bolt plugin is a backup plugin for WordPress websites, mainly used to automate the backup of website data including files, databases, etc., and support the recovery function. WordPress Backup Bolt plugin has an arbitrary file download vulnerability, which stems from a flaw in the...

3.8CVSS7AI score0.0029EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/10 4:20 p.m.9 views

CVE-2025-59976

An arbitrary file download vulnerability in the web interface of Juniper Networks Junos Space allows a network-based authenticated attacker using a crafted GET method to access any file on the file system. Using specially crafted GET methods, an attacker can gain access to files beyond the file...

7.1CVSS6.6AI score0.00266EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/09 4:15 p.m.15 views

CVE-2025-59976

An arbitrary file download vulnerability in the web interface of Juniper Networks Junos Space allows a network-based authenticated attacker using a crafted GET method to access any file on the file system. Using specially crafted GET methods, an attacker can gain access to files beyond the file...

7.1CVSS0.00266EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/09 4:15 p.m.7 views

CVE-2025-59976

An arbitrary file download vulnerability in the web interface of Juniper Networks Junos Space allows a network-based authenticated attacker using a crafted GET method to access any file on the file system. Using specially crafted GET methods, an attacker can gain access to files beyond the file...

7.1CVSS5.9AI score0.00266EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/09 3:59 p.m.20 views

CVE-2025-59976 Junos Space: Arbitrary file download vulnerability in web interface

An arbitrary file download vulnerability in the web interface of Juniper Networks Junos Space allows a network-based authenticated attacker using a crafted GET method to access any file on the file system. Using specially crafted GET methods, an attacker can gain access to files beyond the file...

7.1CVSS0.00266EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/09 3:59 p.m.9 views

CVE-2025-59976 Junos Space: Arbitrary file download vulnerability in web interface

An arbitrary file download vulnerability in the web interface of Juniper Networks Junos Space allows a network-based authenticated attacker using a crafted GET method to access any file on the file system. Using specially crafted GET methods, an attacker can gain access to files beyond the file...

7.1CVSS6.3AI score0.00266EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/09 3:59 p.m.30 views

CVE-2025-59976

CVE-2025-59976 affects Juniper Networks Junos Space. A flaw in the web interface allows a network-authenticated attacker to download arbitrary files via crafted GET requests, escaping the JBoss file-path restrictions. All versions before 24.1R3 are affected. Remediation: upgrade to Junos Space 24...

7.1CVSS6.3AI score0.00266EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/10/09 12:0 a.m.15 views

PT-2025-41410

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos Space versions prior to 24.1R3 Description A flaw exists in the web interface of Junos Space that could allow a network-based attacker with valid credentials to download arbitrary files from the file system. An attacker...

7.1CVSS6.3AI score0.00266EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.10 views

Juniper Networks Junos Space 安全漏洞

Juniper Networks Junos Space is a suite of network management solutions from Juniper Networks, USA. The solution supports automated configuration, monitoring, and troubleshooting of devices and services throughout their lifecycle. A security vulnerability exists in Juniper Networks Junos Space...

7.1CVSS6.4AI score0.00266EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/10/07 12:27 p.m.8 views

WordPress OrderConvo plugin < 14 - Unauthenticated Arbitrary File Read vulnerability

Unauthenticated Arbitrary File Read vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin OrderConvo versions 14...

7.5CVSS6.8AI score0.03632EPSS
SaveExploits4References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2017-9470

Malware in sbrugna...

9.8CVSS9.5AI score0.02966EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2018-3381

Malware in sbrugna...

6.5CVSS6.8AI score0.01452EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-28749

Malware in sbrugna...

7.8CVSS7.6AI score0.0028EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2012-3315

Malware in sbrugna...

5.3CVSS5.5AI score0.01962EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2017-4300

Malware in sbrugna...

7.5CVSS7.6AI score0.02533EPSS
SaveExploits1References5
Rows per page
Query Builder