7881 matches found
CVE-2023-46887
In Dreamer CMS before 4.0.1, the backend attachment management office has an Arbitrary File Download vulnerability...
CVE-2023-46887
In Dreamer CMS, versions prior to 4.0.1 expose an Arbitrary File Download vulnerability in the backend attachment management office. This affects the core product as described in CVE-2023-46887 with an attack vector that is network-based, no privileges required, and no user interaction, leading t...
WordPress JetElements For Elementor Plugin <= 2.6.13 is vulnerable to Arbitrary File Download
Software JetElements For Elementor Type Plugin Vulnerable versions = 2.6.13 Fixed in 2.6.13.1 OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Download CVE CVE-2023-48759 Patch priority High CVSS severity High 7.5 Developer Crocoblock PSID b2e64216e8cc Credits Rafie Muhammad...
CVE-2023-5906: Undefined Security Weakness
The Job Manager & Career WordPress plugin before 1.4.4 contains a vulnerability in the Directory Listings system, which allows an unauthorized user to view and download private files of other users. This vulnerability poses a serious security threat because it allows an attacker to gain access to...
PT-2023-21986 · Hikvision · Localservicecomponents
Name of the Vulnerable Software and Affected Versions: plug-in affected versions not specified Description: The issue allows an attacker to exploit it by sending crafted messages to computers with the plug-in installed, modifying plug-in parameters. This could cause affected computers to download...
VulnCheck KEV: CVE-2021-39316
The Zoomsounds plugin = 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the dzsapdownload action using directory traversal in the link parameter...
CVE-2023-6032
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause a file system enumeration and file download when an attacker navigates to the Network Management Card via HTTPS...
CVE-2023-6032
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause a file system enumeration and file download when an attacker navigates to the Network Management Card via HTTPS...
Path traversal
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause a file system enumeration and file download when an attacker navigates to the Network Management Card via HTTPS...
CVE-2023-6032
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause a file system enumeration and file download when an attacker navigates to the Network Management Card via HTTPS...
CVE-2023-6032
CVE-2023-6032 is a path traversal vulnerability in Schneider Electric Galaxy VS and Galaxy VL Network Management Cards accessible over HTTPS. The root cause is improper limitation of a pathname to a restricted directory, enabling filesystem enumeration and file download. Documented affected produ...
CVE-2023-6032: Improper Limitation of a Pathname to a Restricted Directory
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause a file system enumeration and file download when an attacker navigates to the Network Management Card via HTTPS...
PT-2023-7003 · Galaxy Vs +1 · Galaxy Vs +1
Name of the Vulnerable Software and Affected Versions: Galaxy VL and Galaxy VS affected versions not specified Description: The issue is related to improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability. This could allow a remote attacker to...
Frontend File Manager < 22.7 - Editor+ Arbitrary File Download
Description The plugin has a vulnerability that allows an Editor+ user to bypass the file download logic and download files such as wp-config.php 1 Create new post with this shortcode - ffmwp 2 Go to new post and upload any file 3 After that go to main page of plugin for users...
Frontend File Manager < 22.7 - Editor+ Arbitrary File Download
Description The plugin has a vulnerability that allows an Editor+ user to bypass the file download logic and download files such as wp-config.php PoC 1 Create new post with this shortcode - ffmwp 2 Go to new post and upload any file 3 After that go to main page of plugin for users...
WordPress Frontend File Manager Plugin < 22.6 is vulnerable to Arbitrary File Download
Software Frontend File Manager Type Plugin Vulnerable versions 22.6 Fixed in 22.6 OWASP Top 10 A5: Broken Access Control Classification Arbitrary File Download CVE CVE-2023-5105 Patch priority Medium CVSS severity Medium 9.1 Developer Claim ownership PSID 66e0e4c68ed0 Credits Dmitrii Ignatyev...
Lenovo LeCloud Input Validation Error Vulnerability
Lenovo LeCloud is an application from Chinese company Lenovo Lenovo. An input validation error vulnerability exists in Lenovo LeCloud versions prior to 7.0.25.99. The vulnerability stems from incorrect input validation in the application, which allows an attacker to access arbitrary components an...
CVE-2023-5079: Improper Input Validation
Lenovo LeCloud App improper input validation allows attackers to access arbitrary components and arbitrary file downloads, which could result in information disclosure...
Improper Access Control
ezsystems/ezplatform is vulnerable to Improper Access Control. The vulnerability is caused by missing validations in the file download route used for downloading files by specifying the name of the downloaded file. An attacker can construct download URLs with filenames that have no relation to th...
GHSA-G95C-XC83-8353 Ibexa DXP Download route allows filename change
Impact The route used for file downloads allows specifying the name of the downloaded file. This is an unintended side effect of the implementation, and means one could construct download URLs with filenames that have no relation to the actual file, which could lead to misunderstandings and...