Lucene search
K

3141 matches found

CNNVD
CNNVD
added 2021/02/17 12:0 a.m.4 views

Bolt CMS 路径遍历漏洞

Bolt is a simple CMS written in PHP. A directory traversal vulnerability exists in Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in versions of Bolt prior to 4.1.13. No detailed vulnerability details are provided at this time...

7.5CVSS7.1AI score0.01747EPSS
Exploits0References3
NVD
NVD
added 2021/02/12 7:15 a.m.12 views

CVE-2021-20651

Directory traversal vulnerability in ELECOM File Manager all versions allows remote attackers to create an arbitrary file or overwrite an existing file in a directory which can be accessed with the application privileges via unspecified vectors...

9.1CVSS0.01871EPSS
Exploits0References2
Prion
Prion
added 2021/02/12 7:15 a.m.16 views

Directory traversal

Directory traversal vulnerability in ELECOM File Manager all versions allows remote attackers to create an arbitrary file or overwrite an existing file in a directory which can be accessed with the application privileges via unspecified vectors...

6.4CVSS9AI score0.01871EPSS
Exploits0References2
CVE
CVE
added 2021/02/12 6:15 a.m.79 views

CVE-2021-20651

CVE-2021-20651 describes a directory traversal vulnerability in ELECOM File Manager (all versions). The weakness allows a remote attacker to create or overwrite arbitrary files within directories that the application can access, via unspecified vectors. Connected sources corroborate impact statem...

9.1CVSS9AI score0.01871EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/02/12 6:15 a.m.14 views

CVE-2021-20651

Directory traversal vulnerability in ELECOM File Manager all versions allows remote attackers to create an arbitrary file or overwrite an existing file in a directory which can be accessed with the application privileges via unspecified vectors...

9.3AI score0.01871EPSS
Exploits0References2
OPENSUSE Linux
OPENSUSE Linux
added 2021/02/10 12:0 a.m.42 views

Security update for firejail (important)

openSUSE Security Update: Security update for firejail Announcement ID: openSUSE-SU-2021:0271-1 Rating: important References: 1181990 Cross-References: CVE-2020-17367 CVE-2020-17368 CVE-2021-26910 CVSS scores: CVE-2020-17367 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-17368 NV...

9.8CVSS7AI score0.04098EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.4 views

The vulnerability of the Adobe Bridge file manager, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...

9.3CVSS7.7AI score0.03864EPSS
Exploits0References3Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2021/01/27 8:38 a.m.2 views

Android App "ELECOM File Manager" vulnerable to directory traversal

Overview Android App "ELECOM File Manager" provided by ELECOM CO.,LTD. contains a directory traversal vulnerability CWE-22 due to a flaw in the processing of the filenames when extracting the compressed files. Ryohei Koike reported this vulnerability to IPA. JPCERT/CC coordinated with the develop...

9.1CVSS7AI score0.01871EPSS
Exploits0References5
CNNVD
CNNVD
added 2021/01/27 12:0 a.m.4 views

Elecom File Manager For Android Path Traversal Vulnerability

Elecom File Manager For Android is an application from Elecom Japan for managing files on Android devices. A security vulnerability exists in ELECOM File Manager: All versions, which allows remote attackers to perform directory traversal attacks...

9.1CVSS6.7AI score0.01871EPSS
Exploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2021/01/26 12:0 a.m.75 views

JVN#98115035: Android App "ELECOM File Manager" vulnerable to directory traversal

Android App "ELECOM File Manager" provided by ELECOM CO.,LTD. contains a directory traversal vulnerability CWE-22 due to a flaw in the processing of the filenames when extracting the compressed files. Impact A remote attacker may create an arbitrary file or overwrite an existing file in a directo...

9.1CVSS9.1AI score0.01871EPSS
Exploits0
CNNVD
CNNVD
added 2021/01/07 12:0 a.m.4 views

QuiXplorer 跨站脚本漏洞

QuiXplorer is a web-based file manager that supports document uploading, downloading, searching, editing and more. Quixplorer has an input validation error vulnerability in version 2.4.1 and earlier, which originates from a cross-site scripting attack caused by improper user-supplied input...

6.1CVSS6.2AI score0.02852EPSS
Exploits1References2
CNVD
CNVD
added 2021/01/05 12:0 a.m.2 views

Veno File Manager Directory Traversal Vulnerability

Veno File Manager is a simple and flexible file manager. A directory traversal vulnerability exists in Veno File Manager 3.5.6. An attacker can use this vulnerability to download sensitive files from a server...

7.5CVSS6.9AI score0.0223EPSS
Exploits1References1
OSV
OSV
added 2021/01/04 3:15 p.m.1 views

CVE-2020-22550

Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server...

7.5CVSS7.1AI score0.0223EPSS
Exploits1References2
NVD
NVD
added 2021/01/04 3:15 p.m.19 views

CVE-2020-22550

Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server...

7.5CVSS7.5AI score0.0223EPSS
Exploits1References2
Prion
Prion
added 2021/01/04 3:15 p.m.17 views

Directory traversal

Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server...

5CVSS7.5AI score0.0223EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2021/01/04 2:19 p.m.43 views

CVE-2020-22550

CVE-2020-22550 affects Veno File Manager 3.5.6 and is described as a directory traversal vulnerability that allows an attacker to download sensitive files from the server. The connected documents corroborate the same issue across multiple sources (e.g., NVD, Red Hat, CNVD, CNVD CNVD, RH, etc.), s...

7.5CVSS7.4AI score0.0223EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/01/04 2:19 p.m.19 views

CVE-2020-22550

Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server...

7.5AI score0.0223EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/01/04 12:0 a.m.4 views

VFM Veno File Manager 路径遍历漏洞

Veno File Manager is a simple and flexible file manager. A directory traversal vulnerability exists in Veno File Manager 3.5.6. An attacker can use this vulnerability to download sensitive files from a server...

7.5CVSS7.1AI score0.0223EPSS
Exploits1References3
NVD
NVD
added 2020/12/30 8:15 p.m.9 views

CVE-2020-35173

The Amaze File Manager application before 3.4.2 for Android does not properly restrict intents for controlling the FTP server aka services.ftpservice.FTPReceiver.ACTIONSTARTFTPSERVER and services.ftpservice.FTPReceiver.ACTIONSTOPFTPSERVER...

9.8CVSS9.3AI score0.01704EPSS
Exploits0References3
OSV
OSV
added 2020/12/30 8:15 p.m.7 views

CVE-2020-35173

The Amaze File Manager application before 3.4.2 for Android does not properly restrict intents for controlling the FTP server aka services.ftpservice.FTPReceiver.ACTIONSTARTFTPSERVER and services.ftpservice.FTPReceiver.ACTIONSTOPFTPSERVER...

9.8CVSS7.2AI score
Exploits0References3
Rows per page
Query Builder