Lucene search
K

7209 matches found

0day.today
0day.today
added 2024/01/29 12:0 a.m.290 views

Reprise License Manager 15.1 Privilege Escalation / File Write Vulnerabilities

Multiple Vulnerabilities in Reprise License Manager 15.1 CVE-2023-43183, CVE-2023-44031 Credit: Mohaiman Rahim...

8.8CVSS8.2AI score0.01178EPSS
Exploits3
Packet Storm
Packet Storm
added 2024/01/29 12:0 a.m.366 views

Reprise License Manager 15.1 Privilege Escalation / File Write

Multiple Vulnerabilities in Reprise License Manager 15.1 CVE-2023-43183, CVE-2023-44031 Credit: Mohaiman Rahim...

7.4AI score0.01178EPSS
Exploits3
BDU FSTEC
BDU FSTEC
added 2024/01/29 12:0 a.m.6 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from an incorrect limitation on the path name for the restricted access directory. This allows a malicious user to write files to arbitrary locations on the server when creating a working area.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability allows a malicious actor to perform file writing operations at arbitrary locations o...

9.9CVSS8.2AI score0.03302EPSS
Exploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2024/01/27 2:53 a.m.5 views

SUSE CVE-2023-52076

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the use...

8.5CVSS7.2AI score0.01016EPSS
Exploits2References3
OSV
OSV
added 2024/01/26 1:9 p.m.7 views

SUSE-SU-2024:0248-1 Security update for cpio

This update for cpio fixes the following issues: - CVE-2023-7207: Fixed a path traversal issue that could lead to an arbitrary file write during archive extraction bsc1218571...

4.9CVSS5.1AI score0.00906EPSS
Exploits0References3
GithubExploit
GithubExploit
added 2024/01/26 9:35 a.m.347 views

Exploit for CVE-2023-47400

CVE-2023-47400 Proof of Concept for the CVE-2023-47400 Aut...

8.9AI score
Exploits1
Prion
Prion
added 2024/01/26 1:15 a.m.25 views

Code injection

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace...

6.5CVSS6.7AI score0.03302EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2024/01/26 1:15 a.m.0 views

UBUNTU-CVE-2024-0402

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace...

9.9CVSS7.5AI score0.03302EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2024/01/26 1:2 a.m.67 views

CVE-2024-0402

Removed by vendor...

9.9CVSS7.5AI score0.03302EPSS
Exploits0
OSV
OSV
added 2024/01/26 1:2 a.m.32 views

CVE-2024-0402 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace...

9.9CVSS9.2AI score0.03302EPSS
Exploits0References5
NCSC
NCSC
added 2024/01/26 12:0 a.m.7 views

Vulnerabilities fixed in GitLab Enterprise Edition and Community Edition

GitLab has fixed vulnerabilities in GitLab Enterprise Edition EE and Community Edition CE. A malicious party could vulnerabilities to exploit attacks that can result in the following categories of damage: Denial-of-Service DoS. Manipulation of data Remote code execution Administrator/Root rights...

9.9CVSS7.8AI score0.04392EPSS
Exploits3
CNNVD
CNNVD
added 2024/01/26 12:0 a.m.4 views

GitLab Security Breach

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A security vulnerability exists in GitLab CE/EE version 16.0 up to and includin...

9.9CVSS7.2AI score0.03302EPSS
Exploits0References4
NVD
NVD
added 2024/01/25 4:15 p.m.10 views

CVE-2023-52076

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the use...

8.5CVSS8.5AI score0.01016EPSS
Exploits2References4
OSV
OSV
added 2024/01/25 4:15 p.m.3 views

DEBIAN-CVE-2023-52076

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the use...

7.8CVSS8.1AI score0.01016EPSS
Exploits2References1
UbuntuCve
UbuntuCve
added 2024/01/25 4:15 p.m.19 views

CVE-2023-52076

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the use...

8.5CVSS7.3AI score0.01016EPSS
Exploits2References5
Prion
Prion
added 2024/01/25 4:15 p.m.23 views

Path traversal

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the use...

4.4CVSS7.4AI score0.01016EPSS
Exploits2References3Affected Software1
Debian CVE
Debian CVE
added 2024/01/25 3:30 p.m.17 views

CVE-2023-52076

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the use...

8.5CVSS8.1AI score0.01016EPSS
Exploits2
Cvelist
Cvelist
added 2024/01/25 3:30 p.m.19 views

CVE-2023-52076 Remote Code Execution Vulnerability in Atril's EPUB ebook parsing

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the use...

8.5CVSS8.7AI score0.01016EPSS
Exploits2References4
CVE
CVE
added 2024/01/25 3:30 p.m.61 views

CVE-2023-52076

Atril Document Viewer (MATE) is vulnerable to a path traversal and arbitrary file write flaw in versions preceding 1.26.2, allowing writing arbitrary files to locations accessible by the user opening a crafted document. The vulnerability originates from Atril’s EPUB/document parsing flow and, per...

8.5CVSS7.7AI score0.01016EPSS
In wildExploits2References4Affected Software1
OSV
OSV
added 2024/01/25 3:30 p.m.20 views

CVE-2023-52076 Remote Code Execution Vulnerability in Atril's EPUB ebook parsing

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the use...

8.5CVSS7.9AI score0.01016EPSS
Exploits2References6
Rows per page
Query Builder