Lucene search
+L

636 matches found

NVD
NVD
•added 2023/03/09 9:15 p.m.•62 views

CVE-2023-26957

onekeyadmin v1.3.9 was discovered to contain an arbitrary file delete vulnerability via the component \admin\controller\plugins...

9.1CVSS9.3AI score0.00606EPSS
SaveExploits1References1
Mend
Mend
•added 2023/03/09 12:00 a.m.•3 views

CVE-2023-26957

onekeyadmin v1.3.9 was discovered to contain an arbitrary file delete vulnerability via the component \admin\controller\plugins...

9.1CVSS0.00606EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/03/09 12:00 a.m.•6 views

PT-2023-20875

Name of the Vulnerable Software and Affected Versions onekeyadmin version 1.3.9 Description The issue is related to an arbitrary file delete vulnerability. It affects the component admincontrollerplugins. There is no information provided about the estimated number of potentially affected devices...

9.1CVSS0.00606EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/09 12:00 a.m.•5 views

CVE-2023-26957: Missing Authorization

onekeyadmin v1.3.9 was discovered to contain an arbitrary file delete vulnerability via the component \admin\controller\plugins...

9.1CVSS5.9AI score0.00606EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/03/09 12:00 a.m.•12 views

CVE-2023-26957

onekeyadmin v1.3.9 was discovered to contain an arbitrary file delete vulnerability via the component \admin\controller\plugins...

7.7AI score0.00606EPSS
SaveExploits1References1
CVE
CVE
•added 2023/03/09 12:00 a.m.•76 views

CVE-2023-26957

CVE-2023-26957 affects onekeyadmin v1.3.9. The vulnerability exists in the component admin\controller\plugins and allows an arbitrary file deletion . The CVSS data indicates a network-based, unauthenticated, high-severity impact with integrity and availability both affected. No explicit remediati...

9.1CVSS9.2AI score0.00606EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2023/02/27 3:15 p.m.•23 views

Directory traversal

Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory...

4.3CVSS7.6AI score0.00266EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/02/27 12:00 a.m.•36 views

CVE-2022-45697

Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory...

7.8AI score0.00266EPSS
SaveExploits0References1
CVE
CVE
•added 2023/02/27 12:00 a.m.•76 views

CVE-2022-45697

CVE-2022-45697 affects Razer Central prior to v7.8.0.381, with an Arbitrary File Delete vulnerability when handling files in the Accounts directory. Impact details from the associated records indicate a local-only exposure with high impact on confidentiality, integrity, and availability (CVSS v3....

7.8CVSS7.5AI score0.00266EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/27 12:00 a.m.•4 views

CVE-2022-45697: Improper Link Resolution Before File Access

Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory...

7.8CVSS5.8AI score0.00266EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/02/27 12:00 a.m.•26 views

PT-2023-14730 · Razer · Razercentral

Name of the Vulnerable Software and Affected Versions: Razer Central versions prior to 7.8.0.381 Description: The issue is related to an Arbitrary File Delete vulnerability when handling files in the Accounts directory. Recommendations: For versions prior to 7.8.0.381, update to version 7.8.0.381...

7.8CVSS7.4AI score0.00266EPSS
SaveExploits0References4
NVD
NVD
•added 2023/02/10 1:15 p.m.•36 views

CVE-2023-23698

Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component. A local malicious user may potentially exploit this vulnerability leading to arbitrary file delete...

7.1CVSS6.1AI score0.00176EPSS
SaveExploits0References1
Prion
Prion
•added 2023/02/10 1:15 p.m.•26 views

Design/Logic Flaw

Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component. A local malicious user may potentially exploit this vulnerability leading to arbitrary file delete...

3.2CVSS6.9AI score0.00176EPSS
SaveExploits0References1Affected Software2
CVE
CVE
•added 2023/02/10 12:20 p.m.•74 views

CVE-2023-23698

Dell Command | Update, Dell Update, and Alienware Update prior to 4.6.0 and 4.7.1 are affected. The installer component performs an insecure operation on Windows Junction, allowing a local attacker to delete arbitrary files without user interaction. Impact: high for availability/integrity; exploi...

7.1CVSS6.9AI score0.00176EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2023/02/10 12:20 p.m.•43 views

CVE-2023-23698

Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component. A local malicious user may potentially exploit this vulnerability leading to arbitrary file delete...

5.5CVSS7.1AI score0.00176EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/10 12:00 a.m.•9 views

CVE-2023-23698: Insecure Operation on Windows Junction / Mount Point

Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component. A local malicious user may potentially exploit this vulnerability leading to arbitrary file delete...

7.1CVSS6AI score0.00176EPSS
SaveExploits0References2
NVD
NVD
•added 2022/12/27 9:15 a.m.•45 views

CVE-2022-4748

A vulnerability was found in FlatPress. It has been classified as critical. This affects the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler. The manipulation of the argument deletefile leads to path traversal. The...

9.8CVSS0.00908EPSS
SaveExploits0References4
Prion
Prion
•added 2022/12/27 9:15 a.m.•35 views

Path traversal

A vulnerability was found in FlatPress. It has been classified as critical. This affects the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler. The manipulation of the argument deletefile leads to path traversal. The...

7.5CVSS9.4AI score0.00908EPSS
SaveExploits0References4
OSV
OSV
•added 2022/12/27 8:26 a.m.•53 views

CVE-2022-4748 FlatPress File Delete panel.mediamanager.file.php doItemActions path traversal

A vulnerability was found in FlatPress. It has been classified as critical. This affects the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler. The manipulation of the argument deletefile leads to path traversal. The...

5.5CVSS6AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2022/12/27 8:26 a.m.•51 views

CVE-2022-4748 FlatPress File Delete panel.mediamanager.file.php doItemActions path traversal

A vulnerability was found in FlatPress. It has been classified as critical. This affects the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler. The manipulation of the argument deletefile leads to path traversal. The...

5.5CVSS9.8AI score0.00908EPSS
SaveExploits0References4
Rows per page
Query Builder