Lucene search
+L

10794 matches found

Cvelist
Cvelist
added 2023/11/14 10:52 p.m.45 views

CVE-2023-45619

There is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI Aruba's access point management protocol. Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to...

8.2CVSS9AI score0.00689EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/14 10:51 p.m.81 views

CVE-2023-45618

CVE-2023-45618 describes arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba AP management protocol). Exploitation could allow deleting arbitrary files on the underlying OS, potentially interrupting normal operation and affecting AP integrity. The documen...

8.2CVSS8.2AI score0.00689EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2023/11/14 10:51 p.m.51 views

CVE-2023-45618

There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI Aruba's access point management protocol. Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files on the underlying operating system, which could lead to the...

8.2CVSS9.2AI score0.00689EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/11/14 10:51 p.m.27 views

CVE-2023-45618

There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI Aruba's access point management protocol. Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files on the underlying operating system, which could lead to the...

8.2CVSS7.1AI score0.00689EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/14 10:49 p.m.50 views

CVE-2023-45617

There are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI Aruba's access point management protocol. Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to...

8.2CVSS9.2AI score0.00689EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/11/14 10:49 p.m.27 views

CVE-2023-45617

There are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI Aruba's access point management protocol. Successful exploitation of these vulnerabilities result in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to...

8.2CVSS7.1AI score0.00689EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/14 10:49 p.m.93 views

CVE-2023-45617

CVE-2023-45617 affects Aruba’s PAPI CLI service on Aruba access points. The Red Hat documentation corroborates that there are arbitrary file deletion vulnerabilities in the CLI service accessed via PAPI, and exploitation could allow deletion of arbitrary files on the underlying operating system, ...

8.2CVSS8.2AI score0.00689EPSS
SaveExploits0References1Affected Software2
CISA
CISA
added 2023/11/14 12:00 p.m.20 views

Fortinet Releases Security Updates for FortiClient and FortiGate

Fortinet has released security advisories addressing vulnerabilities in FortiClient and FortiGate. Cyber threat actors may exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Fortinet security advisories and...

9.8CVSS8.3AI score0.78483EPSS
SaveExploits6References3
Positive Technologies
Positive Technologies
added 2023/11/14 12:00 a.m.9 views

PT-2023-29597 · Aruba · Aruba Access Point

Name of the Vulnerable Software and Affected Versions: Aruba access point affected versions not specified Description: The issue concerns arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI, which is Aruba's access point management protocol. Successful exploitation of thes...

8.2CVSS8.3AI score0.00689EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/11/14 12:00 a.m.11 views

Aruba Networks ArubaOS and InstantOS Security Vulnerabilities

Aruba Networks ArubaOS and Aruba Networks InstantOS are both products of Aruba Networks, Inc. Aruba Networks InstantOS is an Arch Linux-based distribution. A security vulnerability exists in Aruba Networks ArubaOS and InstantOS due to an arbitrary file deletion vulnerability in the RSSI service...

8.2CVSS6.8AI score0.00689EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/11/14 12:00 a.m.9 views

Aruba Networks ArubaOS and InstantOS Security Vulnerabilities

Aruba Networks ArubaOS and Aruba Networks InstantOS are both products of Aruba Networks, Inc. Aruba Networks InstantOS is an Arch Linux-based distribution. Aruba Networks ArubaOS and InstantOS have security vulnerabilities that stem from arbitrary file deletion vulnerabilities in the CLI service...

8.2CVSS7.1AI score0.00689EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/11/14 12:00 a.m.10 views

PT-2023-29599 · Aruba · Aruba Access Point

Name of the Vulnerable Software and Affected Versions: Aruba access point affected versions not specified Description: The issue is related to an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI, which is Aruba's access point management protocol. Successful exploitation ...

8.2CVSS7.8AI score0.00689EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/11/10 12:00 a.m.14 views

The vulnerability of the Dell Command | Update, Dell Update, and Alienware Update software relates to a insecure operation at the mount point in the Windows operating system. This allows an attacker to delete arbitrary files.

The vulnerability of the Dell Command | Update, Dell Update, and Alienware Update programs is related to a unsafe operation at the mount point in the Windows operating system. Exploiting this vulnerability could allow an attacker to delete arbitrary files...

7.1CVSS7.2AI score0.00176EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/11/09 12:00 a.m.15 views

The vulnerability of the automation software for installing, deploying, monitoring, and managing Dell Command | Integration Suite for System Center lies in the incorrect handling of links before accessing files. This allows a malicious individual to delete any files they desire.

The vulnerability of the software used for automating the installation, deployment, monitoring, and management of Dell Command | Integration Suite for System Center is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow an attacker t...

4.7CVSS5.4AI score0.00173EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/09 12:00 a.m.14 views

Vulnerability of the qsmremove_file_fd_question function in the Quiz And Survey Master plugin of the WordPress content management system, allowing a user to delete any files they want.

Vulnerability of the qsmremovefilefdquestion function in the Quiz And Survey Master plugin of the WordPress content management system: This vulnerability is related to the lack of authentication checks for a critical function. Exploiting this vulnerability could allow an attacker to remotely dele...

10CVSS7.8AI score0.02034EPSS
SaveExploits5References3Affected Software1
CVE
CVE
added 2023/11/08 9:37 p.m.79 views

CVE-2023-47109

CVE-2023-47109 concerns PrestaShop blockreassurance. The vulnerability allows a business-operator (BO) user to modify the HTTP request during block creation and supply a file path in the project instead of an image. When the block is deleted, the referenced file is removed, and the attack may ena...

8.1CVSS6.5AI score0.00771EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/08 12:00 a.m.12 views

PT-2023-30314 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: PrestaShop versions prior to 5.1.4 Description: The issue affects the blockreassurance module in PrestaShop, which is designed to offer helpful information to reassure customers about the store's trustworthiness. A back-office BO user can...

8.1CVSS7.8AI score0.00771EPSS
SaveExploits0References10
Patchstack
Patchstack
added 2023/11/07 12:00 a.m.29 views

WordPress Awesome Support Plugin < 6.1.5 is vulnerable to Arbitrary File Deletion

Software Awesome Support Type Plugin Vulnerable versions 6.1.5 Fixed in 6.1.5 OWASP Top 10 A5: Security Misconfiguration Classification Arbitrary File Deletion CVE CVE-2023-5355 Patch priority Medium CVSS severity Medium 7.7 Developer Claim ownership PSID b2eca27b2e54 Credits Alex Sanford Require...

8.1CVSS6.8AI score0.0066EPSS
SaveExploits2References4Affected Software1
NVD
NVD
added 2023/11/06 9:15 p.m.30 views

CVE-2023-5355

The Awesome Support WordPress plugin before 6.1.5 does not sanitize file paths when deleting temporary attachment files, allowing a ticket submitter to delete arbitrary files on the server...

8.1CVSS8.1AI score0.0066EPSS
SaveExploits2References1
OSV
OSV
added 2023/11/06 9:15 p.m.14 views

CVE-2023-5355

The Awesome Support WordPress plugin before 6.1.5 does not sanitize file paths when deleting temporary attachment files, allowing a ticket submitter to delete arbitrary files on the server...

8.1CVSS5.9AI score0.0066EPSS
SaveExploits2References1
Rows per page
Query Builder