Lucene search
+L

15985 matches found

OSV
OSV
•added 2024/05/28 3:47 p.m.•182 views

GHSA-G3HR-P86P-593H OpenAPI Generator Online - Arbitrary File Read/Delete

Impact Attackers can exploit the vulnerability to read and delete files and folders from an arbitrary, writable directory as anyone can set the output folder when submitting the request via the outputFolder option. Patches The issue was fixed via...

8.3CVSS8AI score0.03592EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/05/28 3:47 p.m.•48 views

OpenAPI Generator Online - Arbitrary File Read/Delete

Impact Attackers can exploit the vulnerability to read and delete files and folders from an arbitrary, writable directory as anyone can set the output folder when submitting the request via the outputFolder option. Patches The issue was fixed via...

8.3CVSS6.7AI score0.03592EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
•added 2024/05/27 4:11 p.m.•23 views

CVE-2024-35219 OpenAPI Generator Online - Arbitrary File Read/Delete

OpenAPI Generator allows generation of API client libraries SDK generation, server stubs, documentation and configuration automatically given an OpenAPI Spec. Prior to version 7.6.0, attackers can exploit a path traversal vulnerability to read and delete files and folders from an arbitrary,...

8.3CVSS6.6AI score0.03592EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/05/27 4:11 p.m.•137 views

CVE-2024-35219 OpenAPI Generator Online - Arbitrary File Read/Delete

OpenAPI Generator allows generation of API client libraries SDK generation, server stubs, documentation and configuration automatically given an OpenAPI Spec. Prior to version 7.6.0, attackers can exploit a path traversal vulnerability to read and delete files and folders from an arbitrary,...

8.3CVSS8.1AI score0.03592EPSS
SaveExploits0References3
NVD
NVD
•added 2024/05/23 8:15 p.m.•22 views

CVE-2024-5202

Arbitrary File Read in OpenText Dimensions RM allows authenticated users to read files stored on the server via webservices...

7.7CVSS7.5AI score0.00355EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/23 7:11 p.m.•78 views

CVE-2024-5202

OpenText Dimensions RM is affected by CVE-2024-5202, with an Arbitrary File Read vulnerability where authenticated users can read files stored on the server via webservices. The available data identifies the affected product as OpenText Dimensions RM and the vulnerability as an unauthorized read ...

7.7CVSS7.5AI score0.00355EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/23 7:11 p.m.•16 views

CVE-2024-5202 Dimensions RM - Arbitrary File Read

Arbitrary File Read in OpenText Dimensions RM allows authenticated users to read files stored on the server via webservices...

7.7CVSS6.7AI score0.00355EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/23 12:00 a.m.•9 views

OpenText Dimensions RM 安全漏洞

OpenText Dimensions RM is a full-featured requirements management solution from OpenText Canada. A security vulnerability exists in OpenText Dimensions RM that stems from an arbitrary file read issue...

7.7CVSS6.8AI score0.00355EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/05/22 12:00 a.m.•36 views

Fortinet FortiWeb Arbitrary file read through command line pipe (FG-IR-21-218)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-218 advisory. - An incomplete filtering of one or more instances of special elements vulnerability CWE-792 in the command line interpreter o...

5.5CVSS6AI score0.00225EPSS
SaveExploits0References2
NVD
NVD
•added 2024/05/21 6:15 p.m.•31 views

CVE-2024-22275

The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially read arbitrary files containing sensitive data...

4.9CVSS5AI score0.00994EPSS
SaveExploits0References1
OSV
OSV
•added 2024/05/21 6:15 p.m.•9 views

CVE-2024-22275

The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially read arbitrary files containing sensitive data...

4.9CVSS5.9AI score0.00994EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/21 5:29 p.m.•32 views

CVE-2024-22275

The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially read arbitrary files containing sensitive data...

4.9CVSS6.7AI score0.00994EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/21 5:29 p.m.•113 views

CVE-2024-22275

CVE-2024-22275 affects VMware vCenter Server and is a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell can exploit it to read arbitrary sensitive data from files, with Confidentiality impact rated High and other impacts not affected....

4.9CVSS6.6AI score0.00994EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2024/05/21 5:29 p.m.•49 views

CVE-2024-22275

The vCenter Server contains a partial file read vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to partially read arbitrary files containing sensitive data...

4.9CVSS5AI score0.00994EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/21 12:00 a.m.•12 views

VMware vCenter Server 安全漏洞

VMware vCenter Server is a suite of server and virtualization management software from VMware. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructures. A security vulnerability exists in VMware...

4.9CVSS6.7AI score0.00994EPSS
SaveExploits0References3
CNVD
CNVD
•added 2024/05/19 12:00 a.m.•6 views

Arbitrary File Read Vulnerability in ip-guard of Guangzhou Yixin Technology Co.

ip-guard is an all-in-one endpoint security management software, covering all the functions required by enterprises to protect endpoint security, including document encryption, operation control, log audit, sensitive content identification, asset and operation and maintenance management. Ltd...

7.1AI score
SaveExploits0
NVD
NVD
•added 2024/05/18 10:15 p.m.•33 views

CVE-2024-28064

Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated file read and delete operations with displayLoginChunkedImages and write operations with storeLoginChunkedImages...

9.8CVSS6.8AI score0.00856EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/18 10:02 p.m.•22 views

CVE-2024-28064

Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated file read and delete operations with displayLoginChunkedImages and write operations with storeLoginChunkedImages...

7.1AI score0.00856EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/18 10:02 p.m.•123 views

CVE-2024-28064

Kiteworks Totemomail versions 7.x and 8.x prior to 8.3.0 are vulnerable to a directory traversal flaw within the /responsiveUI/EnvelopeOpenServlet endpoint. The vulnerability specifically involves the messageId parameter and is triggered when using the displayLoginChunkedImages and storeLoginChun...

7.3AI score0.00856EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/05/18 12:00 a.m.•12 views

Arbitrary File Read Vulnerability in Puyuan Business Integrated Management Platform of Puyuan Information Technology Co.

Puyuan Information Technology Co., Ltd. is a leading data governance and low-code technology provider and full-stack middleware leader. An arbitrary file read vulnerability exists in the Puyuan Business Integrated Management Platform of Puyuan Information Technology Company Limited, which can be...

6.9AI score
SaveExploits0
Rows per page
Query Builder