Lucene search
+L

7542 matches found

osv_cve
osv_cve
•added 2023/05/10 5:15 p.m.•19 views

CVE-2023-0008

A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to export local files from the firewall through a race condition...

4.4CVSS6.1AI score0.00542EPSS
SaveExploits0References1
NVD
NVD
•added 2023/05/10 5:15 p.m.•38 views

CVE-2023-0008

A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to export local files from the firewall through a race condition...

4.4CVSS4.8AI score0.00542EPSS
SaveExploits0References1
Prion
Prion
•added 2023/05/10 5:15 p.m.•37 views

Race condition

A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to export local files from the firewall through a race condition...

1.7CVSS4.4AI score0.00542EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/10 4:34 p.m.•10 views

CVE-2023-0008 PAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web Interface

A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to export local files from the firewall through a race condition...

4.4CVSS4.5AI score0.00542EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/05/10 4:34 p.m.•44 views

CVE-2023-0008 PAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web Interface

A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to export local files from the firewall through a race condition...

4.4CVSS4.7AI score0.00542EPSS
SaveExploits0References1
CVE
CVE
•added 2023/05/10 4:34 p.m.•156 views

CVE-2023-0008

CVE-2023-0008 is a file-disclosure vulnerability in Palo Alto Networks PAN-OS. The issue allows an authenticated read-write administrator with web-interface access to export local firewall files via a race condition. The connected documents confirm PAN-OS as the affected product and describe the ...

4.4CVSS4.8AI score0.00542EPSS
SaveExploits0References1Affected Software1
Palo Alto Networks
Palo Alto Networks
•added 2023/05/10 4:00 p.m.•107 views

PAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web Interface

A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to export local files from the firewall through a race condition. Work around: This issue requires the attacker to have authenticated access to...

4.4CVSS5.9AI score0.00542EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/05/10 12:00 a.m.•3 views

PT-2023-15945

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS affected versions not specified Description A file disclosure issue in the software enables an authenticated read-write administrator with access to the web interface to export local files from the firewall through a...

4.4CVSS0.00542EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/10 12:00 a.m.•2 views

CVE-2023-0008: External Control of File Name or Path

A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to export local files from the firewall through a race condition...

4.4CVSS5.8AI score0.00542EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/02 12:00 a.m.•11 views

CVE-2022-48482: Improper Limitation of a Pathname to a Restricted Directory

3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /Electron/download directory traversal. Files may have credentials, full backups, call recordings, and chat logs...

7.5CVSS5.8AI score0.01822EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/04/21 12:00 a.m.•16 views

Progress Flowmon 路径遍历漏洞

Progress Flowmon is a real-time network traffic monitoring tool from Progress. A security vulnerability exists in Progress Flowmon versions prior to 12.2.0, which stems from a path traversal vulnerability that can be exploited by an attacker to retrieve files on the device's local file system...

7.5CVSS7.3AI score0.00748EPSS
SaveExploits0References3
Exploit DB
Exploit DB
•added 2023/04/20 12:00 a.m.•400 views

GDidees CMS 3.9.1 - Local File Disclosure

Exploit Title: GDidees CMS 3.9.1 - Local File Disclosure Date : 03/27/2023 Exploit Author : Hadi Mene Vendor Homepage : https://www.gdidees.eu/ Software Link : https://www.gdidees.eu/cms-1-0.html Version : 3.9.1 and earlier Tested on : Debian 11 CVE : CVE-2023-27179 Summary: GDidees CMS v3.9.1 an...

7.5CVSS7.3AI score0.60793EPSS
SaveExploits5
zdt
zdt
•added 2023/04/20 12:00 a.m.•327 views

GDidees CMS 3.9.1 - Local File Disclosure Vulnerability

Exploit Title: GDidees CMS 3.9.1 - Local File Disclosure Exploit Author : Hadi Mene Vendor Homepage : https://www.gdidees.eu/ Software Link : https://www.gdidees.eu/cms-1-0.html Version : 3.9.1 and earlier Tested on : Debian 11 CVE : CVE-2023-27179 Summary: GDidees CMS v3.9.1 and lower versions w...

7.5CVSS7.6AI score0.60793EPSS
SaveExploits5
zdt
zdt
•added 2023/04/18 12:00 a.m.•269 views

GDidees CMS 3.9.1 Local File Disclosure / Directory Traversal Vulnerabilities

Exploit Title: GDidees CMS - 'imgdownload.php' Local File Disclosure Date : 03/27/2023 Exploit Author : Hadi Mene Vendor Homepage : https://www.gdidees.eu/ Software Link : https://www.gdidees.eu/cms-1-0.html Version : 3.9.1 and earlier Tested on : Debian 11 CVE : CVE-2023-27179 Summary: GDidees C...

7.5CVSS7.5AI score0.60793EPSS
SaveExploits5
osv_usn
osv_usn
•added 2023/04/17 11:55 a.m.•18 views

USN-5855-4 imagemagick vulnerabilities

USN-5855-1 fixed vulnerabilities in ImageMagick. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that ImageMagick incorrectly handled certain PNG images. If a user or automated system were tricked into opening ...

6.5CVSS7.1AI score0.89855EPSS
SaveExploits32References3
Packet Storm
Packet Storm
•added 2023/04/17 12:00 a.m.•522 views

GDidees CMS 3.9.1 Local File Disclosure / Directory Traversal

Exploit Title: GDidees CMS - 'imgdownload.php' Local File Disclosure Date : 03/27/2023 Exploit Author : Hadi Mene Vendor Homepage : https://www.gdidees.eu/ Software Link : https://www.gdidees.eu/cms-1-0.html Version : 3.9.1 and earlier Tested on : Debian 11 CVE : CVE-2023-27179 Summary: GDidees C...

7.6AI score0.60793EPSS
SaveExploits5
NVD
NVD
•added 2023/04/16 2:15 a.m.•60 views

CVE-2022-38840

cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity XXE issue via XML file upload, which leads to local file disclosure...

7.5CVSS7.4AI score0.09803EPSS
SaveExploits6References2
osv_cve
osv_cve
•added 2023/04/16 2:15 a.m.•19 views

CVE-2022-38840

cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity XXE issue via XML file upload, which leads to local file disclosure...

7.5CVSS5.8AI score0.09803EPSS
SaveExploits6References2
Prion
Prion
•added 2023/04/16 2:15 a.m.•26 views

Xxe

cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity XXE issue via XML file upload, which leads to local file disclosure...

5CVSS7.3AI score0.09803EPSS
SaveExploits6References2Affected Software1
EUVD
EUVD
•added 2023/04/16 12:00 a.m.•26 views

EUVD-2022-41399

cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity XXE issue via XML file upload, which leads to local file disclosure...

7.5CVSS7.3AI score0.09803EPSS
SaveExploits6References2
Rows per page
Query Builder