Lucene search
+L

13487 matches found

Prion
Prion
•added 2021/09/01 12:15 a.m.•25 views

Arbitrary file deletion

bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin via the deleteBackup' parameter...

5.8CVSS9.1AI score0.01509EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2021/09/01 12:00 a.m.•23 views

Aruba Operating System 跨站请求伪造漏洞

Aruba Operating System is the operating system for Aruba controller-managed wireless LANs and Aruba mobile controllers from Aruba Networks, Inc. user interface to perform file deletion operations...

8.8CVSS5.6AI score0.00398EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/09/01 12:00 a.m.•5 views

PT-2021-13315

Name of the Vulnerable Software and Affected Versions Android versions Android-8.1 through Android-11 Description In the runTraceIpcStop function of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of...

7.8CVSS0.00235EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2021/09/01 12:00 a.m.•16 views

Graphic Editor Application Race Condition File Deletion

The vulnerability of the graphic editor application for Adobe Creative Cloud Desktop Application is due to a “race condition”. Exploiting this vulnerability allows an attacker to remotely delete any file they desire...

5.8CVSS6.2AI score0.01388EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2021/08/31 11:07 p.m.•65 views

CVE-2020-20495

Bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin, exploitable via the deleteBackup parameter. This affects the backup component and can impact integrity and availability (CVSS:3.1 base score 9.1). No remediation details are provided in the supplied documents. ...

9.1CVSS9.2AI score0.01509EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/08/31 11:07 p.m.•6 views

CVE-2020-20495

bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin via the deleteBackup' parameter...

9.1CVSS0.01509EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/08/31 11:07 p.m.•37 views

CVE-2020-20495

bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin via the deleteBackup' parameter...

9.2AI score0.01509EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/08/31 12:00 a.m.•18 views

bludit 安全漏洞

Bludit is an open source lightweight blog content management system CMS. bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin via the deleteBackup parameter...

9.1CVSS8.4AI score0.01509EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/08/31 12:00 a.m.•9 views

PT-2021-10502

Name of the Vulnerable Software and Affected Versions: bludit version 3.13.0 Description: The issue concerns an arbitrary file deletion vulnerability in the backup plugin. This vulnerability can be exploited via the deleteBackup parameter. Recommendations: For bludit version 3.13.0, consider...

9.1CVSS0.01509EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/31 12:00 a.m.•13 views

CVE-2020-20495: Undefined Security Weakness

bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin via the deleteBackup' parameter...

9.1CVSS6AI score0.01509EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/08/31 12:00 a.m.•13 views

CVE-2021-36286

Dell SupportAssist Client Consumer versions 3.9.13.0 and any versions prior to 3.9.13.0 contain an arbitrary file deletion vulnerability that can be exploited by using the Windows feature of NTFS called Symbolic links. Symbolic links can be created by anynon-privileged user under some object...

7.1CVSS7.2AI score0.00259EPSS
SaveExploits0References2
NVD
NVD
•added 2021/08/25 10:15 p.m.•37 views

CVE-2021-37334

Umbraco Forms version 4.0.0 up to and including 8.7.5 and below are vulnerable to a security flaw that could lead to a remote code execution attack and/or arbitrary file deletion. A vulnerability occurs because validation of the file extension is performed after the file has been stored in a...

9.8CVSS0.02744EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/08/25 10:15 p.m.•15 views

CVE-2021-37334

Umbraco Forms version 4.0.0 up to and including 8.7.5 and below are vulnerable to a security flaw that could lead to a remote code execution attack and/or arbitrary file deletion. A vulnerability occurs because validation of the file extension is performed after the file has been stored in a...

9.8CVSS6.5AI score0.02744EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/08/25 10:15 p.m.•10 views

CVE-2021-37334

Umbraco Forms version 4.0.0 up to and including 8.7.5 and below are vulnerable to a security flaw that could lead to a remote code execution attack and/or arbitrary file deletion. A vulnerability occurs because validation of the file extension is performed after the file has been stored in a...

9.8CVSS7.9AI score0.02744EPSS
SaveExploits0References3
Prion
Prion
•added 2021/08/25 10:15 p.m.•25 views

Arbitrary file deletion

Umbraco Forms version 4.0.0 up to and including 8.7.5 and below are vulnerable to a security flaw that could lead to a remote code execution attack and/or arbitrary file deletion. A vulnerability occurs because validation of the file extension is performed after the file has been stored in a...

9.3CVSS9.8AI score0.02744EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/08/25 9:16 p.m.•38 views

CVE-2021-37334

Umbraco Forms version 4.0.0 up to and including 8.7.5 and below are vulnerable to a security flaw that could lead to a remote code execution attack and/or arbitrary file deletion. A vulnerability occurs because validation of the file extension is performed after the file has been stored in a...

10AI score0.02744EPSS
SaveExploits0References2
CVE
CVE
•added 2021/08/25 9:16 p.m.•69 views

CVE-2021-37334

Umbraco Forms versions 4.0.0 through 8.7.5 (and older) are vulnerable to remote code execution and arbitrary file deletion due to file-extension validation occurring after files are stored in a temporary directory (%BASEDIR%/APP_DATA/TEMP/FileUploads/). The web.config protections restricting this...

9.8CVSS9.8AI score0.02744EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2021/08/25 12:00 a.m.•18 views

Umbraco Forms 安全漏洞

Umbraco Forms is a form builder. A security vulnerability exists in Umbraco Forms versions 4.0.0 through 8.7.5, which can be exploited by an attacker to execute remote code and delete arbitrary files...

9.8CVSS8.9AI score0.02744EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/25 12:00 a.m.•9 views

CVE-2021-37334: Undefined Security Weakness

Umbraco Forms version 4.0.0 up to and including 8.7.5 and below are vulnerable to a security flaw that could lead to a remote code execution attack and/or arbitrary file deletion. A vulnerability occurs because validation of the file extension is performed after the file has been stored in a...

9.8CVSS6.5AI score0.02744EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/08/25 12:00 a.m.•6 views

PT-2021-21611

Name of the Vulnerable Software and Affected Versions Umbraco Forms versions 4.0.0 through 8.7.5 Description A security flaw in Umbraco Forms could lead to a remote code execution attack and/or arbitrary file deletion. The issue arises because validation of the file extension is performed after t...

9.8CVSS0.02744EPSS
SaveExploits0References7
Rows per page
Query Builder