Lucene search
+L

807 matches found

Mend
Mend
•added 2025/08/20 12:00 a.m.•5 views

CVE-2025-50901

JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 2025-05-19 contains incorrect authentication bypass vulnerability, which can lead to arbitrary file reading...

9.8CVSS0.00441EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/08/19 12:00 a.m.•13 views

EzGED 安全漏洞

EzGED is an enterprise-level electronic document management system from the French company EzGED. A security vulnerability exists in EzGED version 3.5.0, which stems from insufficient access control and input validation, and could lead to arbitrary file reading...

5.3CVSS6.8AI score0.00709EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/08/15 9:28 a.m.•29 views

CVE-2025-8912

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS7.6AI score0.00579EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/15 9:28 a.m.•27 views

CVE-2025-8909

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS7.4AI score0.00647EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/13 10:15 a.m.•32 views

CVE-2025-8912

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS0.00579EPSS
SaveExploits0References2
NVD
NVD
•added 2025/08/13 9:15 a.m.•17 views

CVE-2025-8909

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS0.00647EPSS
SaveExploits0References2
OSV
OSV
•added 2025/08/13 9:15 a.m.•19 views

CVE-2025-8909

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS5.9AI score0.00647EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/08/13 9:13 a.m.•9 views

CVE-2025-8912 WellChoose|Organization Portal System - Arbitrary File Reading through Path Traversal

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS7.5AI score0.00579EPSS
SaveExploits0References2
CVE
CVE
•added 2025/08/13 9:13 a.m.•41 views

CVE-2025-8912

CVE-2025-8912 affects WellChoose Organization Portal System with an Arbitrary File Reading vulnerability via Absolute Path Traversal. Public data describes an unauthenticated remote attacker being able to download arbitrary system files. The CVE metrics indicate NETWORK access, low attack complex...

8.7CVSS7.5AI score0.00579EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/08/13 9:13 a.m.•26 views

CVE-2025-8912 WellChoose|Organization Portal System - Arbitrary File Reading through Path Traversal

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS0.00579EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/08/13 9:03 a.m.•25 views

CVE-2025-8909 WellChoose|Organization Portal System - Arbitrary File Reading through Path Traversal

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS0.00647EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/08/13 9:03 a.m.•11 views

CVE-2025-8909 WellChoose|Organization Portal System - Arbitrary File Reading through Path Traversal

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS7.4AI score0.00647EPSS
SaveExploits0References2
CVE
CVE
•added 2025/08/13 9:03 a.m.•40 views

CVE-2025-8909

CVE-2025-8909 affects WellChoose Organization Portal System. Multiple sources describe an Arbitrary File Reading via Absolute Path Traversal, enabling remote attackers with low privileges and no user interaction to download arbitrary system files. Concrete details include affected product name an...

7.1CVSS7.4AI score0.00647EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/08/13 12:00 a.m.•20 views

PT-2025-32972 · Wellchoose · Organization Portal System

Name of the Vulnerable Software and Affected Versions: Organization Portal System affected versions not specified Description: The Organization Portal System developed by WellChoose contains an arbitrary file reading flaw. This allows remote attackers with regular privileges to exploit Absolute...

7.1CVSS7.1AI score0.00647EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/13 12:00 a.m.•8 views

CVE-2025-8909: Absolute Path Traversal

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files...

7.1CVSS5.9AI score0.00647EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/13 12:00 a.m.•5 views

CVE-2025-8912: Absolute Path Traversal

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS5.9AI score0.00579EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/24 12:00 a.m.•25 views

WordPress plugin Security Ninja 安全漏洞

WordPress Security Ninja is a plugin that focuses on website security protection, providing automated security scanning, login protection, IP blocking, and two-factor authentication to help users proactively identify security risks and prevent hacker attacks. WordPress Security Ninja has an...

4.9CVSS6.7AI score0.00673EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2025/07/22 6:30 p.m.•32 views

Dagster Local File Inclusion vulnerability

Local File Inclusion in dagster.grpc.impl.getnotebookdata in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebookpath field of ExternalNotebookData requests, bypassing the intended extension-based check...

6.6CVSS7AI score0.00578EPSS
SaveExploits1References7Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/07/13 12:00 a.m.•20 views

The vulnerability of the ColdFusion software platform, related to insufficient validation of incoming requests, allows attackers to read arbitrary files.

The vulnerability of the ColdFusion software platform is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to read arbitrary files...

6.8CVSS5.6AI score0.00436EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/07/10 1:30 a.m.•14 views

CVE-2025-7146

The iPublish System developed by Jhenggao has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to read arbitrary system file...

8.7CVSS7.5AI score0.00617EPSS
SaveExploits0References1
Rows per page
Query Builder