Lucene search
K

71 matches found

Positive Technologies
Positive Technologies
added 2024/01/27 12:0 a.m.4 views

PT-2024-15942

Name of the Vulnerable Software and Affected Versions: obgm libcoap version 4.3.4 Description: A critical issue has been found in the function get split entry of the file src/coap oscore.c of the component Configuration File Handler. This issue leads to a stack-based buffer overflow. The attack c...

7.8CVSS6.7AI score0.00751EPSS
Exploits1References15
NVD
NVD
added 2023/05/31 7:15 p.m.34 views

CVE-2023-33979

gptacademic provides a graphical interface for ChatGPT/GLM. A vulnerability was found in gptacademic 3.37 and prior. This issue affects some unknown processing of the component Configuration File Handler. The manipulation of the argument file leads to information disclosure. Since no sensitive...

6.5CVSS6.3AI score0.00733EPSS
Exploits0References2
Prion
Prion
added 2023/05/31 7:15 p.m.12 views

Information disclosure

gptacademic provides a graphical interface for ChatGPT/GLM. A vulnerability was found in gptacademic 3.37 and prior. This issue affects some unknown processing of the component Configuration File Handler. The manipulation of the argument file leads to information disclosure. Since no sensitive...

4CVSS6.2AI score0.00733EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2023/05/31 6:3 p.m.51 views

CVE-2023-33979

The CVE-2023-33979 issue affects gpt_academic (3.37 and earlier), where improper handling of the Configuration File Handler allows manipulation of the file argument resulting in information disclosure. Read access via the /file route can leak sensitive information from working directories, partic...

6.5CVSS6.4AI score0.00733EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2023/05/31 6:3 p.m.21 views

CVE-2023-33979 gpt_academic's Configuration File vulnerable to File Information Disclosure

gptacademic provides a graphical interface for ChatGPT/GLM. A vulnerability was found in gptacademic 3.37 and prior. This issue affects some unknown processing of the component Configuration File Handler. The manipulation of the argument file leads to information disclosure. Since no sensitive...

6.5CVSS6.1AI score0.00733EPSS
Exploits0References4
OSV
OSV
added 2023/03/31 12:15 p.m.2 views

CVE-2023-1773

A vulnerability was found in Rockoa 2.3.2. It has been declared as critical. This vulnerability affects unknown code of the file webmainConfig.php of the component Configuration File Handler. The manipulation leads to code injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS6.4AI score0.01636EPSS
Exploits0References3
NVD
NVD
added 2023/03/31 12:15 p.m.29 views

CVE-2023-1773

A vulnerability was found in Rockoa 2.3.2. It has been declared as critical. This vulnerability affects unknown code of the file webmainConfig.php of the component Configuration File Handler. The manipulation leads to code injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS7.4AI score0.01636EPSS
Exploits0References3
Prion
Prion
added 2023/03/31 12:15 p.m.21 views

Code injection

A vulnerability was found in Rockoa 2.3.2. It has been declared as critical. This vulnerability affects unknown code of the file webmainConfig.php of the component Configuration File Handler. The manipulation leads to code injection. The attack can be initiated remotely. The exploit has been...

6.5CVSS9.7AI score0.01636EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2023/03/31 12:0 p.m.61 views

CVE-2023-1773

RockOA Rockoa 2.3.2 is affected by a code injection vulnerability in the Configuration File Handler, specifically the webmainConfig.php file. The underlying issue is unauthorized code execution triggered via the webmainConfig.php component, with remote exploitation possible and public disclosure ...

9.8CVSS8.3AI score0.01636EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/31 12:0 a.m.7 views

PT-2023-17233 · Rockoa · Rockoa

Name of the Vulnerable Software and Affected Versions: Rockoa version 2.3.2 Description: A critical issue has been found in the Configuration File Handler component, specifically affecting the webmainConfig.php file. This issue leads to code injection and can be initiated remotely. The exploit fo...

9.8CVSS7.5AI score0.01636EPSS
Exploits0References6
Veracode
Veracode
added 2019/05/02 6:47 a.m.26 views

Information Disclosure

EAP is vulnerable to information disclosure attacks. An attacker could manipulate the component, Configuration File Handler with an unknown input which leads to partially modify data and disclosure of information...

5.5CVSS6.9AI score0.00376EPSS
Exploits0References13Affected Software126
Rows per page
Query Builder