6581 matches found
Mozilla Firefox ESR < 102.10
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 102.10. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-14 advisory. - Mozilla developers Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the Mozilla Fuzzing Team...
Mozilla Firefox ESR < 102.10
The version of Firefox ESR installed on the remote Windows host is prior to 102.10. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-14 advisory. - Mozilla developers Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the Mozilla Fuzzing Team reported memor...
Automated Logic WebCTRL URL Redirection to Untrusted Site (CVE-2022-1019)
Automated Logic's WebCTRL Server versions prior to and including v7.0 'Help' index pages are vulnerable to open redirection. The vulnerability allows an attacker to send a maliciously crafted URL which could result in redirecting the user to a malicious webpage or downloading a malicious file. Th...
ThinManager Path Traversal (CVE-2023-27856) Arbitrary File Download
This module exploits a path traversal vulnerability CVE-2023-27856 in ThinManager use auxiliary/gather/thinmanager/traversaldownload msf undefinedtraversaldownload show actions ...actions... msf undefinedtraversaldownload set ACTION msf undefinedtraversaldownload show options ...show and set...
GHSA-H4C9-RR5M-32FM RuoYi vulnerable to arbitrary file download
An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server...
RuoYi vulnerable to arbitrary file download
An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server...
CVE-2023-27025
An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server...
CVE-2023-27025
An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server...
RuoYi 安全漏洞
RuoYi is a backend management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi v4.7.6 and earlier versions. An attacker can exploit this vulnerability to download arbitrary files from the server...
CVE-2023-27025
The CVE-2023-27025 entry describes an arbitrary file download vulnerability in the background management module of RuoYi versions 4.7.6 and earlier. The underlying issue is an insecure file download path that allows an attacker to retrieve arbitrary server files. Affected software: RuoYi (backend...
PT-2023-20906 · Ruoyi · Ruoyi
Name of the Vulnerable Software and Affected Versions: RuoYi versions 4.7.6 and below Description: An arbitrary file download issue in the background management module allows attackers to download arbitrary files on the server. Recommendations: For versions 4.7.6 and below, update to a version...
CVE-2023-27025
An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server...
CVE-2023-27025
An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server...
CVE-2023-28844 User without download rights can download older version of that file in nextcloud server
Nextcloud server is an open source home cloud implementation. In affected versions users that should not be able to download a file can still download an older version and use that for uncontrolled distribution. This issue has been addressed in versions 24.0.10 and 25.0.4. Users are advised to...
CVE-2023-28844
CVE-2023-28844 affects Nextcloud Server; an access-control error allows users who should not download a file to retrieve an older version and distribute it. Affected versions were prior to 24.0.10 and prior to 25.0.4. The issue is mitigated by upgrading to Nextcloud Server 24.0.10 or 25.0.4 (or l...
PT-2023-22002 · Nextcloud +1 · Nextcloud Server +1
Name of the Vulnerable Software and Affected Versions: Nextcloud server versions prior to 24.0.10 Nextcloud server versions prior to 25.0.4 Description: The issue affects Nextcloud server, an open source home cloud implementation, where users who should not have download permissions can still...
Path Traversal
mlflow is vulnerable to Path Traversal. The vulnerability exists due to improper access control in handlers.py which allows an attacker to traverse outside the restricted directory and download arbitrary files on the server. Note that mlflow is only affected if it runs with either mlflow server o...
CVE-2022-27644
This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R6700v3 1.0.4.12010.0.91 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files...