Lucene search
K

1173 matches found

OSV
OSV
added 2024/05/31 10:15 a.m.3 views

CVE-2024-23692

Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment...

9.8CVSS6.1AI score0.94297EPSS
Exploits20References7
NVD
NVD
added 2024/05/31 10:15 a.m.22 views

CVE-2024-23692

Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment...

9.8CVSS10AI score0.94297EPSS
Exploits20References7
Vulnrichment
Vulnrichment
added 2024/05/31 9:36 a.m.31 views

CVE-2024-23692 Rejetto HTTP File Server 2.3m Unauthenticated RCE

Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment...

9.8CVSS9.9AI score0.94297EPSS
Exploits20References3
Cvelist
Cvelist
added 2024/05/31 9:36 a.m.39 views

CVE-2024-23692 Rejetto HTTP File Server 2.3m Unauthenticated RCE

Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment...

9.8CVSS10AI score0.94297EPSS
Exploits20References3
CVE
CVE
added 2024/05/31 9:36 a.m.278 views

CVE-2024-23692

CVE-2024-23692 affects Rejetto HTTP File Server (HFS) versions up to 2.3m. The vulnerability is a server‑side template injection in the search parameter that is reflected into HFS templates, allowing an unauthenticated attacker to execute arbitrary commands (remote code execution). Exploitation c...

9.8CVSS9.9AI score0.94297EPSS
In wildExploits20References7Affected Software1
ATTACKERKB
ATTACKERKB
added 2024/05/31 12:0 a.m.70 views

CVE-2024-23692

Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment...

9.8CVSS10AI score0.94297EPSS
In wildExploits20References4
CNNVD
CNNVD
added 2024/05/31 12:0 a.m.2 views

Rejetto HTTP File Server 安全漏洞

Rejetto HTTP File Server Rejetto HFS is an HTTP file server from Rejetto. A template injection vulnerability exists in Rejetto HTTP File Server version 2.3m and earlier, which arises from an application that uses unfiltered user input as template parameters when rendering dynamic content, and can...

9.8CVSS9.7AI score0.94297EPSS
Exploits20References4
OSV
OSV
added 2024/05/20 6:15 p.m.1 views

CVE-2023-49335

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details...

8.8CVSS5.8AI score0.00266EPSS
Exploits0References1
NVD
NVD
added 2024/05/20 6:15 p.m.10 views

CVE-2023-49335

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details...

8.8CVSS8.8AI score0.00266EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/20 5:55 p.m.13 views

CVE-2023-49335

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details...

8.3CVSS8AI score0.00266EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/20 5:55 p.m.10 views

CVE-2023-49335

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL injection while getting file server details...

8.3CVSS8.8AI score0.00266EPSS
Exploits0References1
CVE
CVE
added 2024/05/20 5:55 p.m.64 views

CVE-2023-49335

CVE-2023-49335 affects Zoho ManageEngine ADAudit Plus before build 7271. The issue is a SQL injection vulnerability when obtaining file server details, as documented across multiple sources. Impact is stated as high, with potential disclosure/integrity/availability concerns for affected installat...

8.8CVSS7.9AI score0.00266EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/05/20 12:0 a.m.3 views

PT-2024-13728 · Zoho · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADAudit Plus versions below 7271 Description: The issue allows SQL injection while getting file server details. Recommendations: For Zoho ManageEngine ADAudit Plus versions below 7271, update to version 7271 or later to...

8.8CVSS7.4AI score0.00266EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2024/05/03 12:0 a.m.2 views

PT-2024-22252 · Solarwinds · Serv-U Ftp Server

Name of the Vulnerable Software and Affected Versions: Serv-U FTP server affected versions not specified Description: A highly privileged account can overwrite arbitrary files on the system with log output due to improper sanitization of log file path tags. Recommendations: At the moment, there i...

5.7CVSS7AI score0.00203EPSS
Exploits0References6
NCSC
NCSC
added 2024/04/10 12:0 a.m.3 views

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution User rights Spoofing Accessing...

8.8CVSS7.9AI score0.85591EPSS
Exploits6
OSV
OSV
added 2024/04/09 5:15 p.m.1 views

CVE-2024-26216

Windows File Server Resource Management Service Elevation of Privilege Vulnerability...

7.3CVSS7.3AI score0.00664EPSS
Exploits0References1
NVD
NVD
added 2024/04/09 5:15 p.m.17 views

CVE-2024-26216

Windows File Server Resource Management Service Elevation of Privilege Vulnerability...

7.3CVSS7.8AI score0.00664EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/09 5:1 p.m.22 views

CVE-2024-26216 Windows File Server Resource Management Service Elevation of Privilege Vulnerability

...

7.3CVSS8AI score0.00664EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/04/09 5:1 p.m.20 views

CVE-2024-26216 Windows File Server Resource Management Service Elevation of Privilege Vulnerability

...

7.3CVSS6.8AI score0.00664EPSS
Exploits0References1
CVE
CVE
added 2024/04/09 5:1 p.m.159 views

CVE-2024-26216

CVE-2024-26216 is a Windows vulnerability affecting the Windows File Server Resource Management Service, categorized as a privilege-escalation issue with a CVSS-like score around 7.3 (high) in public guidance. The connected documents confirm the vulnerability is tied to Windows File Server Resour...

7.3CVSS7.8AI score0.00664EPSS
Exploits0References1Affected Software6
Rows per page
Query Builder