Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/05/05 2:20 a.m.•28 views

CVE-2026-6074

Intrado 911 Emergency Gateway EGW 5.x, 6.x, and 7.x contain a path traversal vulnerability in the downloaddebuglogfile.php endpoint used for Debug Logs downloads. An unauthenticated attacker can manipulate the name parameter to read arbitrary files outside the intended directory...

9.8CVSS5.9AI score0.0067EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/23 9:31 p.m.•27 views

EUVD-2026-25276

A path traversal condition in Intrado 911 Emergency Gateway could allow an attacker with existing network access the ability to access the EGW management interface without authentication. Successful exploitation of this vulnerability could allow a user to read, modify, or delete files...

9.3CVSS5.8AI score0.0067EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/23 6:14 p.m.•27 views

CVE-2026-6074

CVE-2026-6074 describes a path traversal vulnerability in the Intrado 911 Emergency Gateway (EGW). The issue arises from a malformed path (".../...//") that could allow an attacker with existing network access to reach the EGW management interface without authentication. Successful exploitation c...

9.8CVSS6AI score0.0067EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/04/23 6:14 p.m.•49 views

CVE-2026-6074 Path traversal: '.../...//' in Intrado 911 Emergency Gateway (EGW)

Intrado 911 Emergency Gateway EGW 5.x, 6.x, and 7.x contain a path traversal vulnerability in the downloaddebuglogfile.php endpoint used for Debug Logs downloads. An unauthenticated attacker can manipulate the name parameter to read arbitrary files outside the intended directory...

9.8CVSS0.0067EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/23 12:00 a.m.•1 views

CVE-2026-6074: Path Traversal: '.../...//'

Intrado 911 Emergency Gateway EGW 5.x, 6.x, and 7.x contain a path traversal vulnerability in the downloaddebuglogfile.php endpoint used for Debug Logs downloads. An unauthenticated attacker can manipulate the name parameter to read arbitrary files outside the intended directory...

9.8CVSS6AI score0.0067EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/26 12:00 a.m.•2 views

CVE-2024-1839: Improper Neutralization of Special Elements used in an SQL Command

Intrado 911 Emergency Gateway login form is vulnerable to an unauthenticated blind time-based SQL injection, which may allow an unauthenticated remote attacker to execute malicious code, exfiltrate data, or manipulate the database...

10CVSS6.2AI score0.0054EPSS
SaveExploits0References1
Rows per page
Query Builder