Lucene search
+L

133 matches found

Cvelist
Cvelist
•added 2026/07/29 7:09 p.m.•68 views

CVE-2026-5489 DriveLock Directory Traversal Information Disclosure Vulnerability

DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service,...

5.3CVSS0.01524EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/29 7:09 p.m.•15 views

CVE-2026-5489

DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service,...

5.3CVSS6AI score0.01524EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/07/29 7:09 p.m.•114 views

CVE-2026-5489

CVE-2026-5489 concerns the DriveLock web service, which listens on TCP port 4568 by default. The flaw stems from insufficient validation of a user-supplied path used in file operations, allowing a remote attacker to disclose sensitive information in the context of the service account. The impact ...

5.3CVSS6AI score0.01524EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/29 7:09 p.m.•11 views

CVE-2026-5489 DriveLock Directory Traversal Information Disclosure Vulnerability

DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service,...

5.3CVSS6AI score0.01524EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/29 7:09 p.m.•22 views

EUVD-2026-50493

DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service,...

5.3CVSS6.1AI score0.01524EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/29 7:09 p.m.•12 views

CVE-2026-5487 DriveLock Directory Traversal Information Disclosure Vulnerability

DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service,...

7.5CVSS7.2AI score0.0183EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/29 7:09 p.m.•18 views

CVE-2026-5487

DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service,...

7.5CVSS7.1AI score0.0183EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/07/29 7:09 p.m.•67 views

CVE-2026-5487 DriveLock Directory Traversal Information Disclosure Vulnerability

DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service,...

7.5CVSS0.0183EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/29 7:09 p.m.•17 views

EUVD-2026-50492

DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service,...

7.5CVSS7.1AI score0.0183EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/29 7:09 p.m.•98 views

CVE-2026-5487

The CVE describes a directory traversal in DriveLock’s web service (default port 4568). The vulnerability arises from improper validation of a user-supplied path before file operations, allowing an attacker to disclose sensitive information in the service account context without authentication. T...

7.5CVSS7.2AI score0.0183EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/29 12:00 a.m.•0 views

CVE-2026-5489: Improper Limitation of a Pathname to a Restricted Directory

DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service,...

5.3CVSS6AI score0.01524EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/29 12:00 a.m.•3 views

CVE-2026-5492: Improper Limitation of a Pathname to a Restricted Directory

DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which...

6.5CVSS6.6AI score0.01596EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/29 12:00 a.m.•2 views

CVE-2026-5491: Improper Limitation of a Pathname to a Restricted Directory

DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service,...

7.5CVSS7.2AI score0.0183EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/29 12:00 a.m.•2 views

CVE-2026-5487: Improper Limitation of a Pathname to a Restricted Directory

DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service,...

7.5CVSS7.2AI score0.0183EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/29 12:00 a.m.•1 views

CVE-2026-5490: Improper Neutralization of Special Elements used in an SQL Command

DriveLock SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of DriveLock. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP por...

8.8CVSS7.8AI score0.00707EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/15 12:00 a.m.•21 views

PT-2026-33190

DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service,...

7.5CVSS7.1AI score0.0183EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/15 12:00 a.m.•19 views

PT-2026-33193

DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service,...

7.5CVSS7.1AI score0.0183EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2026/04/15 12:00 a.m.•22 views

DriveLock SQL Injection Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of DriveLock. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 4568 by default. The issue results from the lack of proper...

8.8CVSS5.9AI score0.00707EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2026/04/15 12:00 a.m.•23 views

DriveLock Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 6067 by default. The issue results from the...

7.5CVSS5.7AI score0.0183EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2026/04/15 12:00 a.m.•21 views

DriveLock Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 4568 by default. The issue results from the...

5.3CVSS5.7AI score0.01524EPSS
SaveExploits0References1
Rows per page
Query Builder