Lucene search
+L

13459 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/10 12:00 a.m.•6 views

CVE-2022-27167: Improper Handling of Insufficient Permissions or Privileges

Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET...

7.1CVSS7.1AI score0.0019EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/10 12:00 a.m.•4 views

CVE-2022-1476: Improper Limitation of a Pathname to a Restricted Directory

The All-in-One WP Migration plugin for WordPress is vulnerable to arbitrary file deletion via directory traversal due to insufficient file validation via the /lib/model/class-ai1wm-backups.php file, in versions up to, and including, 7.58. This can be exploited by administrative users, and users w...

6.6CVSS7AI score0.46268EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/05/09 1:00 p.m.•10 views

CVE-2022-27167

Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET...

7.1CVSS7.1AI score0.0019EPSS
SaveExploits0References2Affected Software9
Mend
Mend
•added 2022/05/07 3:40 a.m.•5 views

CVE-2022-29180

A vulnerability in which attackers could forge HTTP requests to manipulate the "charm" data directory to access or delete anything on the server. This has been patched and is available in release "v0.12.1" https://github.com/charmbracelet/charm/releases/tag/v0.12.1. We recommend that all users...

9.8CVSS0.00799EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/07 12:00 a.m.•11 views

CVE-2022-29180: Server-Side Request Forgery (SSRF)

A vulnerability in which attackers could forge HTTP requests to manipulate the charm data directory to access or delete anything on the server. This has been patched and is available in release v0.12.1. We recommend that all users running self-hosted charm instances update immediately. This...

9.8CVSS7.9AI score0.00799EPSS
SaveExploits0References3
Prion
Prion
•added 2022/05/05 1:15 p.m.•30 views

Arbitrary file deletion

novel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability...

5CVSS7.6AI score0.0109EPSS
SaveExploits1References1Affected Software1
Github Security Blog
Github Security Blog
•added 2022/05/04 12:00 a.m.•42 views

Arbitrary file deletion in gitea

An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service DoS via deleting the configuration file...

7.5CVSS5.3AI score0.0104EPSS
SaveExploits0References4Affected Software1
osv-ghsa
osv-ghsa
•added 2022/05/04 12:00 a.m.•52 views

GHSA-G7P7-X6W7-W6QG Arbitrary file deletion in gitea

An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service DoS via deleting the configuration file...

7.5CVSS7.3AI score0.0104EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2022/05/03 8:15 p.m.•17 views

CVE-2022-27313

An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service DoS via deleting the configuration file...

7.5CVSS6AI score0.0104EPSS
SaveExploits0References2
NVD
NVD
•added 2022/05/03 8:15 p.m.•54 views

CVE-2022-27313

An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service DoS via deleting the configuration file...

7.5CVSS0.0104EPSS
SaveExploits0References1
Prion
Prion
•added 2022/05/03 8:15 p.m.•19 views

Arbitrary file deletion

An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service DoS via deleting the configuration file...

5CVSS7.4AI score0.0104EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/05/03 7:57 p.m.•129 views

CVE-2022-27313

Gitea vuln CVE-2022-27313 affects Gitea v1.16.3 and allows arbitrary file deletion of the configuration file, leading to DoS. Multiple sources (NVD/OSV/GHSA) describe the issue; OpenVAS notes vulnerability for Gitea

7.5CVSS7.3AI score0.0104EPSS
SaveExploits0References1Affected Software1
osv-cve
osv-cve
•added 2022/05/03 7:57 p.m.•25 views

CVE-2022-27313

An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service DoS via deleting the configuration file...

7.4AI score
SaveExploits0References3
Mend
Mend
•added 2022/05/03 7:57 p.m.•3 views

CVE-2022-27313

An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service DoS via deleting the configuration file...

8.7CVSS0.0104EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2022/05/03 7:57 p.m.•60 views

CVE-2022-27313

An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service DoS via deleting the configuration file...

7.6AI score0.0104EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2022/05/03 7:57 p.m.•109 views

CVE-2022-27313

An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service DoS via deleting the configuration file...

7.5CVSS7.4AI score0.0104EPSS
SaveExploits0
CNNVD
CNNVD
•added 2022/05/03 12:00 a.m.•41 views

Gitea 安全漏洞

Gitea is a lightweight Go-based git service developed by the Gitea community. A security vulnerability exists in Gitea version 1.16.3 that originates from a denial of service DoS via deletion of a configuration file. An attacker can exploit the vulnerability to delete arbitrary files...

7.5CVSS7.4AI score0.0104EPSS
SaveExploits0References2
Fortinet
Fortinet
•added 2022/05/03 12:00 a.m.•101 views

FortiClient - Privilege escalation in FortiClient installer

An external control of file name or path vulnerability CWE-73 in FortiClient Windows may allow an unprivileged attacker to delete or execute files with admin rights via the MSI installer...

4.6CVSS4.4AI score0.00224EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/03 12:00 a.m.•5 views

CVE-2022-27313: Undefined Security Weakness

An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service DoS via deleting the configuration file...

7.5CVSS7.3AI score0.0104EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/05/03 12:00 a.m.•5 views

PT-2022-18374

Name of the Vulnerable Software and Affected Versions Gitea version 1.16.3 Description The issue allows attackers to cause a Denial of Service DoS via deleting the configuration file. This is due to an arbitrary file deletion vulnerability. Recommendations For Gitea version 1.16.3, update to a...

7.5CVSS7.3AI score0.0104EPSS
SaveExploits0References15
Rows per page
Query Builder