Lucene search
+L

10927 matches found

Veracode
Veracode
added 2023/11/23 5:55 a.m.23 views

Directory Traversal

org.jeecgframework.boot: jeecg-boot-common is vulnerable to Directory Traversal. The vulnerability allows a privileged remote attacker to obtain sensitive directory structure information...

6.5CVSS6.8AI score0.01137EPSS
SaveExploits0References2Affected Software1
Fedora
Fedora
added 2023/11/23 1:11 a.m.36 views

[SECURITY] Fedora 37 Update: microcode_ctl-2.1-53.3.fc37

The microcodectl utility is a companion to the microcode driver written by Tigran Aivazian . The microcode update is volatile and needs to be uploaded on each system boot i.e. it doesn't reflash your cpu permanently, reboot and it reverts back to the old microcode...

8.8CVSS7.4AI score0.01714EPSS
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2023/11/23 12:00 a.m.32 views

Spring Tips: Spring Boot 3.2

Hi, Spring fans! In this installment of Spring Tips, I look at the new Spring Boot 3.2 release, due to drop today, the 23rd of November 2023! 23-11-23! We're diving into the cool new features of Spring Boot 3.2 and Java 21. We'll explore how virtual threads from Project Loom make your code run...

7.3AI score
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2023/11/23 12:00 a.m.17 views

A Bootiful Podcast: iText Creator Bruno Lowagie

Hi, Spring fans! We're releasing Spring Boot 3.2 today! And it's Thanksgiving in the USA Happy Thanksgiving!. So, we wanted to celebrate with an amazing episode, and so today's guest is opensource legend Bruno Lowagie. Enjoy!...

7.2AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2023/11/22 6:30 p.m.32 views

Directory Traversal in jeecg-boot

Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file directory structure...

6.5CVSS6.6AI score0.01137EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/11/22 6:30 p.m.8 views

GHSA-RGG9-264H-3HFW Directory Traversal in jeecg-boot

Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file directory structure...

6.5CVSS6.6AI score0.01137EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2023/11/22 6:15 p.m.9 views

CVE-2023-47467

Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file directory structure...

6.5CVSS6.6AI score0.01137EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/22 6:15 p.m.26 views

CVE-2023-47467

Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file directory structure...

6.5CVSS0.01137EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/22 6:15 p.m.17 views

Directory traversal

Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file directory structure...

4CVSS6.5AI score0.01137EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/22 12:00 a.m.18 views

PT-2023-30461

Name of the Vulnerable Software and Affected Versions jeecg-boot version 3.6.0 Description A Directory Traversal issue allows a remote privileged attacker to obtain sensitive information via the file directory structure. Recommendations For jeecg-boot version 3.6.0, at the moment, there is no...

6.5CVSS6.3AI score0.01137EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2023/11/22 12:00 a.m.39 views

CVE-2023-47467

Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file directory structure...

6.3AI score0.01137EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/22 12:00 a.m.95 views

CVE-2023-47467

CVE-2023-47467 targets jeecg-boot v3.6.0 with a directory traversal flaw that lets a remote privileged attacker enumerate sensitive information via the file directory structure. Affected component is jeecg-boot (common/root cause not explicitly stated beyond traversal). Impact is sensitive data d...

6.5CVSS6.1AI score0.01137EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/11/22 12:00 a.m.13 views

CVE-2023-47467

Directory Traversal vulnerability in jeecg-boot v.3.6.0 allows a remote privileged attacker to obtain sensitive information via the file directory structure...

6.2AI score
SaveExploits0References3
CNNVD
CNNVD
added 2023/11/22 12:00 a.m.13 views

jeecg-boot Security Vulnerabilities

Jeecg-Boot is a code generator based low-code platform from the JeecgBoot community. A security vulnerability exists in jeecg-boot version v.3.6.0, which stems from the presence of a directory traversal vulnerability. An attacker can exploit the vulnerability to obtain sensitive information throu...

6.5CVSS6.7AI score0.01137EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/21 7:15 a.m.28 views

CVE-2023-5553

During internal Axis Security Development Model ASDM threat-modelling, a flaw was found in the protection for device tampering commonly known as Secure Boot in AXIS OS making it vulnerable to a sophisticated attack to bypass this protection. To Axis' knowledge, there are no known exploits of the...

7.6CVSS0.00332EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/21 7:15 a.m.12 views

CVE-2023-5553

During internal Axis Security Development Model ASDM threat-modelling, a flaw was found in the protection for device tampering commonly known as Secure Boot in AXIS OS making it vulnerable to a sophisticated attack to bypass this protection. To Axis' knowledge, there are no known exploits of the...

6.8CVSS5.8AI score0.00332EPSS
SaveExploits0References1
Prion
Prion
added 2023/11/21 7:15 a.m.18 views

Design/Logic Flaw

During internal Axis Security Development Model ASDM threat-modelling, a flaw was found in the protection for device tampering commonly known as Secure Boot in AXIS OS making it vulnerable to a sophisticated attack to bypass this protection. To Axis' knowledge, there are no known exploits of the...

4.6CVSS6.9AI score0.00332EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2023/11/21 6:59 a.m.16 views

CVE-2023-5553

During internal Axis Security Development Model ASDM threat-modelling, a flaw was found in the protection for device tampering commonly known as Secure Boot in AXIS OS making it vulnerable to a sophisticated attack to bypass this protection. To Axis' knowledge, there are no known exploits of the...

7.6CVSS7AI score0.00332EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/21 6:59 a.m.27 views

CVE-2023-5553

During internal Axis Security Development Model ASDM threat-modelling, a flaw was found in the protection for device tampering commonly known as Secure Boot in AXIS OS making it vulnerable to a sophisticated attack to bypass this protection. To Axis' knowledge, there are no known exploits of the...

7.6CVSS7.6AI score0.00332EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/21 6:59 a.m.56 views

CVE-2023-5553

CVE-2023-5553 affects Axis OS Secure Boot protection. The AXIS OS tampering-protection bypass is the underlying issue, enabling a sophisticated attack to bypass the device’s tamper protection. Public detail indicates affected AXIS OS ranges include versions 10.8–11.6 (per external summaries), wit...

7.6CVSS6.8AI score0.00332EPSS
SaveExploits0References1Affected Software2
Rows per page
Query Builder