Lucene search
+L

15086 matches found

Github Security Blog
Github Security Blog
added 2024/06/04 9:32 p.m.31 views

Jan path traversal vulnerability

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface...

7.5CVSS7.4AI score0.02054EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2024/06/04 7:20 p.m.40 views

CVE-2024-36857

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface...

7.5CVSS7.1AI score0.02054EPSS
SaveExploits1References1
OSV
OSV
added 2024/06/04 7:20 p.m.11 views

CVE-2024-36857

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface...

7.5CVSS5.9AI score0.02054EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/06/04 6:26 p.m.43 views

CVE-2024-36857

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface...

7.1AI score0.02054EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/06/04 6:26 p.m.13 views

CVE-2024-36857

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface...

7.6AI score0.02054EPSS
SaveExploits1References1
EUVD
EUVD
added 2024/06/04 6:26 p.m.13 views

EUVD-2024-1932

Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface...

7.5CVSS6.9AI score0.02054EPSS
SaveExploits1References3
OSV
OSV
added 2024/06/04 3:19 p.m.26 views

GO-2024-2814 Pterodactyl Wings vulnerable to Arbitrary File Write/Read in github.com/pterodactyl/wings

Pterodactyl Wings vulnerable to Arbitrary File Write/Read in github.com/pterodactyl/wings...

8.4CVSS8.2AI score0.00544EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/06/04 1:12 p.m.63 views

CVE-2024-33568 WordPress Element Pack Pro plugin < 7.19.3 - Arbitrary File Read and Phar Deserialization vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Deserialization of Untrusted Data vulnerability in BdThemes Element Pack Pro allows Path Traversal, Object Injection.This issue affects Element Pack Pro: from n/a before 7.19.3...

8.5CVSS8.4AI score0.00523EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/04 1:12 p.m.43 views

CVE-2024-33568 WordPress Element Pack Pro plugin < 7.19.3 - Arbitrary File Read and Phar Deserialization vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Deserialization of Untrusted Data vulnerability in BdThemes Element Pack Pro allows Path Traversal, Object Injection.This issue affects Element Pack Pro: from n/a before 7.19.3...

8.5CVSS7.2AI score0.00523EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/03 10:15 a.m.44 views

CVE-2024-3829

qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlink that points to a desired file on the...

9.8CVSS9.2AI score0.00909EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/06/03 10:05 a.m.24 views

CVE-2024-3829 Arbitrary File Read and Write during Snapshot Recovery in qdrant/qdrant

qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlink that points to a desired file on the...

9.8CVSS6.6AI score0.00909EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/06/03 10:05 a.m.55 views

CVE-2024-3829 Arbitrary File Read and Write during Snapshot Recovery in qdrant/qdrant

qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlink that points to a desired file on the...

9.8CVSS9.2AI score0.00909EPSS
SaveExploits1References2
OSV
OSV
added 2024/06/03 10:05 a.m.33 views

CVE-2024-3829 Arbitrary File Read and Write during Snapshot Recovery in qdrant/qdrant

qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlink that points to a desired file on the...

9.8CVSS7.3AI score
SaveExploits0References4
GithubExploit
GithubExploit
added 2024/06/02 1:58 p.m.69 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE-2024-24919 PoC a Proof of Concept of CVE-2024-24919 Read...

8.6CVSS9.3AI score0.99978EPSS
SaveExploits53
GithubExploit
GithubExploit
added 2024/06/02 1:09 p.m.427 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Checkpoint Quantum_Spark_Firmware

CVE-2024-24919-POC Read about it - https://nvd.nist.gov/v...

8.6CVSS8.9AI score0.99978EPSS
SaveExploits53
NVD
NVD
added 2024/05/31 6:15 p.m.21 views

CVE-2021-44534

Insufficient user input filtering leads to arbitrary file read by non-authenticated attacker, which results in sensitive information disclosure...

6.5CVSS6.2AI score0.00563EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2024/05/31 6:15 p.m.44 views

CVE-2021-44534

Insufficient user input filtering leads to arbitrary file read by non-authenticated attacker, which results in sensitive information disclosure...

6.5CVSS6.6AI score0.00563EPSS
SaveExploits0References3
OSV
OSV
added 2024/05/31 6:15 p.m.27 views

CVE-2021-44534

Insufficient user input filtering leads to arbitrary file read by non-authenticated attacker, which results in sensitive information disclosure...

8.2CVSS6.6AI score0.21514EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2024/05/31 6:15 p.m.16 views

UBUNTU-CVE-2021-44534

Insufficient user input filtering leads to arbitrary file read by non-authenticated attacker, which results in sensitive information disclosure...

6.5CVSS6.8AI score0.00563EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/05/31 5:40 p.m.59 views

CVE-2021-44534

Insufficient user input filtering leads to arbitrary file read by non-authenticated attacker, which results in sensitive information disclosure...

6.2AI score0.00563EPSS
SaveExploits0References1
Rows per page
Query Builder