Lucene search
+L

9380 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/05 12:00 a.m.•5 views

CVE-2023-32540: Improper Control of Generation of Code

In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file overwrite vulnerability, which could allow an attacker to overwrite any file in the operating system including system files, inject code into an XLS file, and modify the file extension, which could lead to arbitrary code...

9.8CVSS6.3AI score0.00898EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/06/02 12:00 a.m.•18 views

Advantech WebAccess/SCADA code injection vulnerability

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. An arbitrary file overwrite vulnerability exist...

9.8CVSS7.6AI score0.00898EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2023/06/01 9:15 p.m.•18 views

CVE-2023-29736

Keyboard Themes 1.275.1.164 for Android contains a dictionary traversal vulnerability that allows unauthorized apps to overwrite arbitrary files in its internal storage and achieve arbitrary code execution...

9.8CVSS7.5AI score0.01199EPSS
SaveExploits1References1
osv_ghsa
osv_ghsa
•added 2023/06/01 3:30 p.m.•94 views

GHSA-P223-C4W6-Q454 hawtio vulnerable to Path Traversal

hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite...

5.5CVSS5.2AI score0.00304EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2023/06/01 3:30 p.m.•39 views

hawtio vulnerable to Path Traversal

hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite...

5.5CVSS6.7AI score0.00304EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2023/06/01 1:15 p.m.•20 views

CVE-2023-33544

hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite...

5.5CVSS6AI score0.00304EPSS
SaveExploits1References2
Prion
Prion
•added 2023/06/01 1:15 p.m.•39 views

Path traversal

hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite...

1.9CVSS5.3AI score0.00304EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/06/01 12:00 a.m.•21 views

Hawt Hawtio path traversal vulnerability

Hawt Hawtio is a modular web console program for managing Java content. A security vulnerability exists in Hawt Hawtio version 2.17.2 that stems from the presence of a path traversal vulnerability. An attacker can exploit the vulnerability to input a malicious unzipped file, resulting in the file...

5.5CVSS5.7AI score0.00304EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/06/01 12:00 a.m.•62 views

CVE-2023-33544

hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite...

5.6AI score0.00304EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/01 12:00 a.m.•7 views

CVE-2023-29736: Improper Limitation of a Pathname to a Restricted Directory

Keyboard Themes 1.275.1.164 for Android contains a dictionary traversal vulnerability that allows unauthorized apps to overwrite arbitrary files in its internal storage and achieve arbitrary code execution...

9.8CVSS6.3AI score0.01199EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/06/01 12:00 a.m.•18 views

Timmystudios Fast Typing Keyboard path traversal vulnerability

Timmystudios Fast Typing Keyboard is an Android app keyboard by Timmystudios. A security vulnerability exists in Timmystudios Fast Typing Keyboard Themes version 1.275.1.164, which stems from the presence of a dictionary traversal vulnerability that could allow an unauthorized application to...

9.8CVSS8.8AI score0.01199EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/06/01 12:00 a.m.•17 views

PT-2023-22387 · Unknown · Keyboard Themes

Name of the Vulnerable Software and Affected Versions: Keyboard Themes version 1.275.1.164 Description: The issue allows unauthorized apps to overwrite arbitrary files in the internal storage of Keyboard Themes and achieve arbitrary code execution due to a dictionary traversal vulnerability...

9.8CVSS7.8AI score0.01199EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2023/06/01 12:00 a.m.•39 views

CVE-2023-33544

hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite...

5.5CVSS6.8AI score0.00304EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/06/01 12:00 a.m.•18 views

PT-2023-24377 · Hawtio · Hawtio

Name of the Vulnerable Software and Affected Versions: hawtio version 2.17.2 Description: The issue allows an attacker to input malicious zip files, which can result in high-risk files after decompression being stored in any location, potentially leading to file overwrite. This is due to a Path...

5.5CVSS6.7AI score0.00304EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2023/06/01 12:00 a.m.•13 views

CVE-2023-33544

hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite...

6.8AI score0.00304EPSS
SaveExploits1References1
Mend
Mend
•added 2023/06/01 12:00 a.m.•7 views

CVE-2023-33544

hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite...

6.8CVSS0.00304EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/01 12:00 a.m.•4 views

CVE-2023-33544: Improper Limitation of a Pathname to a Restricted Directory

hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite...

5.5CVSS5.8AI score0.00304EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2023/05/30 5:15 a.m.•23 views

CVE-2023-33245

Minecraft through 1.19 and 1.20 pre-releases before 7 Java allow arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink...

8.8CVSS5.9AI score0.00872EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2023/05/30 5:15 a.m.•10 views

CVE-2023-33245

Minecraft through 1.19 and 1.20 pre-releases before 7 Java allow arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink...

8.8CVSS7.5AI score0.00872EPSS
SaveExploits0References4
NVD
NVD
•added 2023/05/30 5:15 a.m.•38 views

CVE-2023-33245

Minecraft through 1.19 and 1.20 pre-releases before 7 Java allow arbitrary file overwrite, and possibly code execution, via crafted world data that contains a symlink...

8.8CVSS8.8AI score0.00872EPSS
SaveExploits0References3
Rows per page
Query Builder