Lucene search
+L

1242 matches found

NVD
NVD
added 2024/03/07 1:15 a.m.15 views

CVE-2024-26566

An issue in Cute Http File Server v.3.1 allows a remote attacker to escalate privileges via the password verification component...

8.2CVSS7AI score0.00495EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/07 1:15 a.m.8 views

CVE-2024-26566

An issue in Cute Http File Server v.3.1 allows a remote attacker to escalate privileges via the password verification component...

8.2CVSS5.9AI score0.00495EPSS
SaveExploits0References3
Prion
Prion
added 2024/03/07 1:15 a.m.20 views

Design/Logic Flaw

An issue in Cute Http File Server v.3.1 allows a remote attacker to escalate privileges via the password verification component...

7.6AI score0.00495EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/07 12:0 a.m.8 views

Cute Http File Server Security Vulnerability

Cute Http File Server is a free, HTTP protocol file sharing server for iscute individual developers. A security vulnerability exists in Cute Http File Server version v.3.1, which originates from a vulnerability that could allow a remote attacker to escalate privileges via a password authenticatio...

8.2CVSS7.4AI score0.00495EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/03/07 12:0 a.m.12 views

CVE-2024-26566

An issue in Cute Http File Server v.3.1 allows a remote attacker to escalate privileges via the password verification component...

7.6AI score0.00495EPSS
SaveExploits0References2
CVE
CVE
added 2024/03/07 12:0 a.m.81 views

CVE-2024-26566

CVE-2024-26566 affects Cute Http File Server v3.1. The issue allows a remote attacker to escalate privileges via the password verification component, with a network attack vector, no user interaction, and high impact (Integrity). Affected software is Cute Http File Server v3.1 (no other versions ...

8.2CVSS7.2AI score0.00495EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/07 12:0 a.m.12 views

PT-2024-21424

Name of the Vulnerable Software and Affected Versions Cute Http File Server version 3.1 Description The issue allows a remote attacker to escalate privileges via the password verification component. Recommendations For Cute Http File Server version 3.1, consider disabling the password verificatio...

8.2CVSS6.1AI score0.00495EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2024/03/07 12:0 a.m.27 views

CVE-2024-26566

An issue in Cute Http File Server v.3.1 allows a remote attacker to escalate privileges via the password verification component...

7.2AI score0.00495EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2024/02/02 3:45 a.m.5 views

SUSE CVE-2024-22232

A specially crafted url can be created which leads to a directory traversal in the salt file server. A malicious user can read an arbitrary file from a Salt master's filesystem...

7.7CVSS7.4AI score0.0083EPSS
SaveExploits0References18
Positive Technologies
Positive Technologies
added 2024/01/21 12:0 a.m.7 views

PT-2024-1429 · Unknown · Solar Ftp Server

Name of the Vulnerable Software and Affected Versions: Solar FTP Server versions 2.1.1 through 2.1.2 Description: The issue is related to an uncontrolled resource consumption in the PASV mode of the Solar FTP Server, which can be exploited by a remote attacker to cause a denial of service. The...

7.5CVSS5.6AI score0.01353EPSS
SaveExploits1References8
CVE
CVE
added 2024/01/19 7:43 p.m.379 views

CVE-2024-23331

CVE-2024-23331 (Vite) : The Vite dev server option server.fs.deny can be bypassed on case-insensitive file systems by using case-augmented filenames. The issue occurs because picomatch defaults to case-sensitive glob matching, while the file server does not, enabling a blacklist bypass and potent...

7.5CVSS7.3AI score0.00791EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/19 12:0 a.m.14 views

PT-2024-15794 · Unknown · Xlight Ftp Server

Name of the Vulnerable Software and Affected Versions: Xlightftpd Xlight FTP Server version 1.1 Description: A problematic vulnerability was found in the Login component, where the manipulation of the user argument leads to denial of service. The attack can be initiated remotely. Recommendations:...

7.5CVSS7AI score0.04195EPSS
SaveExploits3References7
CNNVD
CNNVD
added 2024/01/15 12:0 a.m.7 views

Ability FTP Server Security Vulnerability

Ability FTP Server is an easy to use FTP service. A security vulnerability exists in Ability FTP Server version 2.34, which originates from a Denial of Service DOS vulnerability in the component APPE Command Handler...

7.5CVSS6.8AI score0.01354EPSS
SaveExploits1References4
OSV
OSV
added 2024/01/09 11:15 p.m.5 views

CVE-2024-0352

A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipulation of the argument file leads to...

9.8CVSS5.5AI score0.72917EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/01/09 12:0 a.m.8 views

PT-2024-15488

Name of the Vulnerable Software and Affected Versions Likeshop versions up to 2.5.7.20210311 Description A critical vulnerability was found in the function FileServer::userFormImage of the file server/application/api/controller/File.php, which is part of the HTTP POST Request Handler component. T...

9.8CVSS6.7AI score0.72917EPSS
SaveExploits1References10
Veracode
Veracode
added 2024/01/08 6:51 a.m.13 views

Path Traversal

iodine is vulnerable to Path Traversal . The vulnerability is due to improper validation or URL's allowrf to manipulate the static file server. This issue can be exploited by an attacker to read files outside the public folder via a malicious URL...

7.5CVSS6.8AI score0.00914EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/04 8:24 p.m.2 views

CVE-2024-22050 Iodine Static File Server Path Traversal Vulnerability

Path traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to read files outside the public folder via malicious URLs...

7.3AI score0.00914EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/01/04 8:24 p.m.41 views

CVE-2024-22050 Iodine Static File Server Path Traversal Vulnerability

Path traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to read files outside the public folder via malicious URLs...

7.7AI score0.00914EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/11/07 9:3 a.m.6 views

kernel: nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net

A flaw was identified in the NFS server nfsd implementation in the Linux kernel where the initialization of the per-CPU replycachestats counters was relocated incorrectly in the code path. This change can lead to use of uninitialized per-CPU statistical counters during NFS request handling when t...

5.9AI score0.00174EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2023/11/05 12:0 a.m.19 views

Fedora: Security Advisory (FEDORA-2023-39f0ec3879)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.6AI score0.02655EPSS
SaveExploits0References5
Rows per page
Query Builder