Lucene search
K

28 matches found

Cvelist
Cvelist
added 2026/02/01 12:56 p.m.32 views

CVE-2022-50950 Webile 1.0.1 Directory Traversal Vulnerability via Web Application

Webile 1.0.1 contains a directory traversal vulnerability that allows remote attackers to manipulate file system paths without authentication. Attackers can exploit path manipulation to access sensitive system directories and potentially compromise the mobile device's local file system...

7.1CVSS0.00875EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2014-3024

Malware in sbrugna...

5.8CVSS6.2AI score0.0102EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2005-2219

Malware in sbrugna...

7.2CVSS6.2AI score0.00375EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/10/06 2:14 p.m.3 views

CVE-2025-10653

An unauthenticated debug port may allow access to the device file system...

8.6CVSS7AI score0.00396EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-32203

Malicious code in bioql PyPI...

8.6CVSS6.6AI score0.00396EPSS
Exploits0References3
NVD
NVD
added 2025/10/02 8:15 p.m.3 views

CVE-2025-10653

An unauthenticated debug port may allow access to the device file system...

8.6CVSS0.00396EPSS
Exploits0References2
CVE
CVE
added 2025/10/02 8:3 p.m.10 views

CVE-2025-10653

Technical details such as affected products/versions, root cause, and remediation are not publicly provided in the connected documents. Monitor for updates from vendors and security feeds to obtain concrete information and a confirmed fix.

8.6CVSS6.6AI score0.00396EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/02 8:3 p.m.4 views

CVE-2025-10653 Raise3D Pro2 Series 3D Printers Authentication Bypass Using an Alternate Path or Channel

An unauthenticated debug port may allow access to the device file system...

8.6CVSS0.00396EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/02 8:3 p.m.2 views

CVE-2025-10653 Raise3D Pro2 Series 3D Printers Authentication Bypass Using an Alternate Path or Channel

An unauthenticated debug port may allow access to the device file system...

8.6CVSS6.6AI score0.00396EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/02 12:0 a.m.3 views

Raisecom MSG1200 安全漏洞

The Raisecom MSG1200 is a Gigabit Converged Gateway from Raisecom China. A security vulnerability exists in the Raisecom MSG1200 that stems from an unauthenticated debug port that may allow access to the device file system...

8.6CVSS6.8AI score0.00396EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/02 12:0 a.m.3 views

PT-2025-40419

Name of the Vulnerable Software and Affected Versions affected versions not specified Description An unauthenticated debug port may allow access to the device file system. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

8.6CVSS6.5AI score0.00396EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/02/04 12:0 a.m.4 views

Western Telematic NPS Series、DSM Series和CPM Series 安全漏洞

Western Telematic NPS Series and others are products of Western Telematic, Inc.Western Telematic NPS Series is a series of network power switches.Western Telematic DSM Series is a series of console servers. Western Telematic CPM Series is a series of console servers. A security vulnerability exis...

6.5CVSS6.6AI score0.00391EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/23 12:0 a.m.3 views

ECOVACS robot lawnmowers 安全漏洞

ECOVACS robot lawnmowers is a series of lawnmowers from the Chinese company ECOVACS. A security vulnerability exists in ECOVACS robot lawnmowers that originates from storing the anti-theft PIN in plaintext in the device file system. An attacker could steal the lawnmower, read the PIN, and reset t...

4.8CVSS6.6AI score0.00148EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/08/09 12:0 a.m.5 views

PHOENIX CONTACTs WP 6xxx series web panels Security Vulnerability

PHOENIX CONTACTs WP 6xxx series web panels are a series of web panels from PHOENIX CONTACTs, Germany. A security vulnerability exists in PHOENIX CONTACT WP 6xxx series versions prior to 4.0.10, which originates in the web panels, where a remote attacker with low privileges can gain limited read...

4.3CVSS6.7AI score0.00429EPSS
Exploits0References2
CNVD
CNVD
added 2022/10/13 12:0 a.m.21 views

Information leakage vulnerability of multiple Siemens products

Siemens Desigo PX is a building automation control system from Siemens, a German company. The information disclosure vulnerability in several Siemens products stems from the fact that the endpoint of the "Operation" web application that interprets and executes Axon language queries allows file re...

3.8AI score0.0081EPSS
Exploits0
OSV
OSV
added 2022/10/11 11:15 a.m.3 views

CVE-2022-40177

A vulnerability has been identified in Desigo PXM30-1 All versions V02.20.126.11-41, Desigo PXM30.E All versions V02.20.126.11-41, Desigo PXM40-1 All versions V02.20.126.11-41, Desigo PXM40.E All versions V02.20.126.11-41, Desigo PXM50-1 All versions V02.20.126.11-41, Desigo PXM50.E All versions...

5.7CVSS5.8AI score0.0081EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/10/11 11:15 a.m.0 views

CVE-2022-40177

A vulnerability has been identified in Desigo PXM30-1 All versions V02.20.126.11-41, Desigo PXM30.E All versions V02.20.126.11-41, Desigo PXM40-1 All versions V02.20.126.11-41, Desigo PXM40.E All versions V02.20.126.11-41, Desigo PXM50-1 All versions V02.20.126.11-41, Desigo PXM50.E All versions...

5.7CVSS6.3AI score0.0081EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/01/28 12:0 a.m.4 views

The vulnerability of the Adobe Connect instant messaging program, related to the,。

The vulnerability of the Adobe Connect instant messaging program relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to remotely write arbitrary files to the device’s file system...

4.3CVSS7.1AI score
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:0 a.m.1 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from incorrect restrictions on the path to the restricted catalog. This allows attackers to write arbitrary files into the device’s file system.

The vulnerability of the Magento Commerce development and management software platform is related to incorrect restrictions on the path name used to access the restricted catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files to the device’s file system...

5CVSS7.2AI score0.0178EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/09/10 12:0 a.m.2 views

The vulnerability of the Cisco RoomOS operating system, related to permission handling errors, allows a intruder to write arbitrary files to the device’s file system.

The vulnerability of the Cisco RoomOS operating system is related to permission handling errors. Exploiting this vulnerability allows an attacker to write arbitrary files to the device’s file system with root privileges...

7.2CVSS5.6AI score0.00262EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder