Lucene search
+L

11 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:18 p.m.•21 views

CVE-2026-9508

Incorrect permission settings on a critical resource in Suprema BioStar 2 versions 2.9.3 through 2.9.11 that allow backup files to be publicly exposed when the administrator configures their path within the NGINX webroot. This vulnerability allows an attacker with network access to directly...

10CVSS5.5AI score0.00546EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/29 12:09 p.m.•16 views

CVE-2026-9508

Incorrect permission settings on a critical resource in Suprema BioStar 2 versions 2.9.3 through 2.9.11 that allow backup files to be publicly exposed when the administrator configures their path within the NGINX webroot. This vulnerability allows an attacker with network access to directly...

10CVSS5.8AI score0.00546EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/05/29 12:09 p.m.•30 views

EUVD-2026-33282

Incorrect permission settings on a critical resource in Suprema BioStar 2 versions 2.9.3 through 2.9.11 that allow backup files to be publicly exposed when the administrator configures their path within the NGINX webroot. This vulnerability allows an attacker with network access to directly...

10CVSS5.8AI score0.00546EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2023-41952

Malicious code in bioql PyPI...

7.2CVSS7.1AI score0.71188EPSS
SaveExploits0References1
NVD
NVD
•added 2023/12/19 10:15 p.m.•42 views

CVE-2023-38126

Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. Authentication is required to exploit this vulnerability. The specific fl...

7.2CVSS0.71188EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/12/19 10:15 p.m.•11 views

CVE-2023-38126

Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. Authentication is required to exploit this vulnerability. The specific fl...

7.2CVSS7.6AI score0.71188EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2023/12/19 10:15 p.m.•32 views

Remote code execution

Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. Authentication is required to exploit this vulnerability. The specific fl...

5.8CVSS8.2AI score0.71188EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/19 9:50 p.m.•64 views

CVE-2023-38126 Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability

Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. Authentication is required to exploit this vulnerability. The specific fl...

7.2CVSS7.7AI score0.71188EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/19 12:00 a.m.•2 views

CVE-2023-38126: Improper Limitation of a Pathname to a Restricted Directory

Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. Authentication is required to exploit this vulnerability. The specific fl...

7.2CVSS7.8AI score0.71188EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
•added 2023/08/09 12:00 a.m.•36 views

(0Day) (Pwn2Own) Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Softing edgeAggregator. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of backup zip files. The issue results from the lack of proper...

7.2CVSS7.3AI score0.71188EPSS
SaveExploits0
CNNVD
CNNVD
•added 2021/08/10 12:00 a.m.•20 views

SAP ERP 路径遍历漏洞

SAP Cloud Connector is used to establish a secure connection between a computer and the SAP cloud platform. A path traversal vulnerability exists in SAP Cloud Connector version 2.0, which arises by allowing the upload of zip files as backups. Such backup files can be spoofed by injecting special...

7.5CVSS5.8AI score0.0117EPSS
SaveExploits0References5
Rows per page
Query Builder