Lucene search
+L

7542 matches found

Packet Storm
Packet Storm
•added 2020/02/12 12:00 a.m.•133 views

WordPress Wordfence 7.4.5 Local File Disclosure

Tile: Wordpress Plugin wordfence.7.4.5 - Local File Disclosure - Author: mehran feizi - Category: webapps - Date: 2020.02.12 - vendor home page: https://wordpress.org/plugins/wordfence/ ============================================================================== Vulnerable Source: 5662:...

7.4AI score
SaveExploits0
zdt
zdt
•added 2020/02/12 12:00 a.m.•104 views

WordPress Wordfence 7.4.5 Local File Disclosure Vulnerability

Exploit for php platform in category web applications - Tile: Wordpress Plugin wordfence.7.4.5 - Local File Disclosure - Author: mehran feizi - Category: webapps - Date: 2020.02.12 - vendor home page: https://wordpress.org/plugins/wordfence/...

7.1AI score
SaveExploits0
CNVD
CNVD
•added 2020/02/11 12:00 a.m.•24 views

Nextcloud server improper authorization vulnerability

Nextcloud is a client-server software suite for creating network hard disks. An improper authorization vulnerability exists in Nextcloud Server 17.0.0. An attacker can exploit the vulnerability to cause preview and file disclosure when opening a file to place a share link via the Gallery...

4.3CVSS6.7AI score0.00915EPSS
SaveExploits0References1
NVD
NVD
•added 2020/02/07 2:15 p.m.•38 views

CVE-2013-0192

File Disclosure in SMF SimpleMachines Forum = 2.0.3: Forum admin can read files such as the database config...

4.9CVSS5.1AI score0.0376EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2020/02/07 2:15 p.m.•7 views

CVE-2013-0192

File Disclosure in SMF SimpleMachines Forum = 2.0.3: Forum admin can read files such as the database config...

4.9CVSS5.4AI score0.0376EPSS
SaveExploits1References4Affected Software1
Prion
Prion
•added 2020/02/07 2:15 p.m.•34 views

Arbitrary file deletion

File Disclosure in SMF SimpleMachines Forum = 2.0.3: Forum admin can read files such as the database config...

4CVSS7.1AI score0.0376EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2020/02/07 1:29 p.m.•70 views

CVE-2013-0192

CVE-2013-0192 affects Simple Machines Forum (SMF) up to version 2.0.3. The vulnerability is a file disclosure that enables a forum admin to read sensitive files, such as the database configuration, indicating insufficient access restrictions when handling file operations. The available sources (N...

4.9CVSS5.1AI score0.0376EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2020/02/07 1:29 p.m.•45 views

CVE-2013-0192

File Disclosure in SMF SimpleMachines Forum = 2.0.3: Forum admin can read files such as the database config...

5.1AI score0.0376EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/07 12:00 a.m.•10 views

CVE-2013-0192: Exposure of Sensitive Information to an Unauthorized Actor

File Disclosure in SMF SimpleMachines Forum = 2.0.3: Forum admin can read files such as the database config...

4.9CVSS5.7AI score0.0376EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2020/02/06 4:06 p.m.•49 views

CVE-2019-19800

Zoho ManageEngine Applications Manager 14 before 14520 allows a remote unauthenticated attacker to disclose OS file names via FailOverHelperServlet...

5.3AI score0.03893EPSS
SaveExploits0References3
CVE
CVE
•added 2020/02/06 4:06 p.m.•76 views

CVE-2019-19800

The issue affects Zoho ManageEngine Applications Manager 14 prior to version 14520 . A vulnerability in the FailOverHelperServlet allows a remote unauthenticated attacker to disclose OS file names, constituting an information disclosure vulnerability. The observed impact is limited to exposing fi...

5.3CVSS5.2AI score0.03893EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2020/02/06 12:00 a.m.•9 views

PT-2020-19268

Name of the Vulnerable Software and Affected Versions SOS JobScheduler versions 1.12 through 1.13.2 Description A vulnerability exists in the JOC Cockpit component, allowing attackers to read files from the server via an entity declaration in XML documents used for job and order run-time settings...

6.5CVSS0.00926EPSS
SaveExploits0References3
NVD
NVD
•added 2020/02/05 5:15 p.m.•36 views

CVE-2020-6833

An issue was discovered in GitLab EE 11.3 and later. A GitLab Workhorse bypass could lead to package and file disclosure via request smuggling...

7.5CVSS7.3AI score0.01174EPSS
SaveExploits0References2
Prion
Prion
•added 2020/02/05 5:15 p.m.•30 views

Design/Logic Flaw

An issue was discovered in GitLab EE 11.3 and later. A GitLab Workhorse bypass could lead to package and file disclosure via request smuggling...

5CVSS7.3AI score0.01174EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2020/02/05 5:15 p.m.•11 views

CVE-2020-6833

An issue was discovered in GitLab EE 11.3 and later. A GitLab Workhorse bypass could lead to package and file disclosure via request smuggling...

7.5CVSS7.3AI score0.01174EPSS
SaveExploits0References5
CVE
CVE
•added 2020/02/05 4:23 p.m.•92 views

CVE-2020-6833

GitLab EE 11.3 and later is affected by a GitLab Workhorse bypass that could lead to package and file disclosure via request smuggling. The issue is documented across multiple sources (OSV, NVD, CNVD, etc.) with the same core description. The connected documents do not provide a published fix or ...

7.5CVSS7.2AI score0.01174EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/02/05 4:23 p.m.•39 views

CVE-2020-6833

An issue was discovered in GitLab EE 11.3 and later. A GitLab Workhorse bypass could lead to package and file disclosure via request smuggling...

7.3AI score0.01174EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2020/02/05 4:23 p.m.•60 views

CVE-2020-6833

Removed by vendor...

7.5CVSS7.1AI score0.01174EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/05 12:00 a.m.•10 views

CVE-2020-6833: Undefined Security Weakness

An issue was discovered in GitLab EE 11.3 and later. A GitLab Workhorse bypass could lead to package and file disclosure via request smuggling...

7.5CVSS7.3AI score0.01174EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/02/05 12:00 a.m.•16 views

PT-2020-19252 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 11.3 and later Description: An issue was discovered that could lead to a GitLab Workhorse bypass, resulting in package and file disclosure via request smuggling. Recommendations: For GitLab EE versions 11.3 and later, at th...

7.5CVSS7.1AI score0.01174EPSS
SaveExploits0References7
Rows per page
Query Builder