Lucene search
+L

1743 matches found

Zero Day Initiative
Zero Day Initiative
•added 2024/06/04 12:00 a.m.•36 views

NETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this vulnerability. The specific flaw exists within the UpLoadServlet class. The issue results from the lack of proper...

8.8CVSS7.7AI score0.46989EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/05/22 12:00 a.m.•27 views

LAquis SCADA LGX Report STRING WRITETOFILE Path Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LAquis SCADA. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation of...

7.8CVSS6.9AI score0.00411EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/05/22 12:00 a.m.•35 views

LAquis SCADA LGX Report TextFile Open Path Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LAquis SCADA. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation of...

7.8CVSS7.8AI score0.00411EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/05/22 12:00 a.m.•35 views

LAquis SCADA LGX Report TextFile OpenWithoutMemory Path Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LAquis SCADA. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation of...

7.8CVSS6.9AI score0.00411EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/05/22 12:00 a.m.•29 views

LAquis SCADA LGX Report STRING READFROMFILE Path Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LAquis SCADA. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

5.5CVSS5.8AI score0.00411EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/05/22 12:00 a.m.•40 views

LAquis SCADA LGX Report File Open Path Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LAquis SCADA. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation of...

7.8CVSS6.9AI score0.00411EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/05/22 12:00 a.m.•25 views

LAquis SCADA LGX Report Processing AddComboFile Path Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LAquis SCADA. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation of...

7.8CVSS7AI score0.00411EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/05/18 10:02 p.m.•43 views

CVE-2024-28064

Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated file read and delete operations with displayLoginChunkedImages and write operations with storeLoginChunkedImages...

6.8AI score0.00856EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/05/11 12:00 a.m.•35 views

RHEL 6 : glib2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - glib2: filecopyfallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a...

6.2AI score0.04693EPSS
SaveExploits4References6
NVD
NVD
•added 2024/05/07 11:15 p.m.•32 views

CVE-2022-0369

Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploi...

8.8CVSS7.4AI score0.02298EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/07 10:54 p.m.•85 views

CVE-2022-0369

CVE-2022-0369 affects Triangle MicroWorks SCADA Data Gateway. The flaw is in the Restore Workspace feature where user-supplied paths are not properly validated, enabling a remote attacker to execute code with SYSTEM privileges and bypass authentication. Documented as a directory traversal RCE vul...

8.8CVSS7.5AI score0.02298EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/05/03 3:15 a.m.•39 views

CVE-2023-41182

NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is required to exploit...

8.8CVSS7.5AI score0.62287EPSS
SaveExploits0References2
NVD
NVD
•added 2024/05/03 3:15 a.m.•38 views

CVE-2023-41181

LG SuperSign Media Editor getSubFolderList Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG SuperSign Media Editor. Authentication is not required to exploit this vulnerability. T...

5.3CVSS4.9AI score0.02133EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/03 3:15 a.m.•101 views

CVE-2023-40517

LG SuperSign Media Editor ContentRestController getObject Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG SuperSign Media Editor. Authentication is not required to exploit this...

7.5CVSS7.2AI score0.02527EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/03 3:15 a.m.•44 views

CVE-2023-40514

LG Simple Editor FileManagerController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploit this...

6.5CVSS6.2AI score0.02873EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/03 3:15 a.m.•42 views

CVE-2023-40513

LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Although authentication is required to exploit this...

6.5CVSS6.2AI score0.02873EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/03 3:15 a.m.•31 views

CVE-2023-40509

LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists withi...

9.1CVSS8.2AI score0.02049EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/03 3:15 a.m.•41 views

CVE-2023-40500

LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists...

9.8CVSS9.9AI score0.01857EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/03 3:15 a.m.•29 views

CVE-2023-40498

LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within th...

9.8CVSS10AI score0.8509EPSS
SaveExploits3References1
NVD
NVD
•added 2024/05/03 3:15 a.m.•26 views

CVE-2023-40495

LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw...

7.5CVSS7.2AI score0.75653EPSS
SaveExploits0References1
Rows per page
Query Builder