Lucene search
K

1017 matches found

CNNVD
CNNVD
added 2023/02/02 12:0 a.m.1 views

Multilaser RE057 和 RE170 信息泄露漏洞

The Multilaser RE057 and Multilaser RE170 are both a router from Multilaser. An information disclosure vulnerability exists in the Multilaser RE057 and RE170 versions 2.1/2.2 that originates in an unknown portion of the component Backup File Handler, resulting in information disclosure...

7.5CVSS6AI score0.00286EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/01/12 4:49 p.m.1 views

jenkins-plugin: Arbitrary file write vulnerability in Pipeline Input Step Plugin

A flaw was found in the Pipeline Input Step Plugin. This issue affects the code of the component Archive File Handler. The manipulation of the argument file with a malicious input leads to a directory traversal vulnerability...

7.5CVSS6.2AI score0.00112EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2023/01/06 8:12 a.m.3 views

jenkins-plugin: Arbitrary file write vulnerability in Pipeline Input Step Plugin

A flaw was found in the Pipeline Input Step Plugin. This issue affects the code of the component Archive File Handler. The manipulation of the argument file with a malicious input leads to a directory traversal vulnerability...

7.5CVSS6.2AI score0.00112EPSS
Exploits0References5
OSV
OSV
added 2023/01/04 10:15 p.m.19 views

CVE-2021-4302

A vulnerability was found in slackero phpwcms up to 1.9.26. It has been classified as problematic. This affects an unknown part of the component SVG File Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.9.27 is able to...

6.1CVSS6.2AI score
Exploits0References4
NVD
NVD
added 2023/01/04 10:15 p.m.9 views

CVE-2021-4302

A vulnerability was found in slackero phpwcms up to 1.9.26. It has been classified as problematic. This affects an unknown part of the component SVG File Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.9.27 is able to...

6.1CVSS4.5AI score0.00246EPSS
Exploits0References4
Cvelist
Cvelist
added 2023/01/04 9:24 p.m.10 views

CVE-2021-4302 slackero phpwcms SVG File cross site scripting

A vulnerability was found in slackero phpwcms up to 1.9.26. It has been classified as problematic. This affects an unknown part of the component SVG File Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.9.27 is able to...

4CVSS6.2AI score0.00246EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/01/04 12:0 a.m.2 views

phpwcms 跨站脚本漏洞

phpwcms is an open source web content management system. It is fast, easy to install and runs on any standard web server platform that supports PHP/MySQL. A cross-site scripting vulnerability exists in versions prior to phpwcms 1.9.26, which stems from an unknown portion of the component SVG file...

6.1CVSS4.2AI score0.00246EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2023/01/04 12:0 a.m.2 views

PT-2023-12406 · Slackero · Phpcms

Name of the Vulnerable Software and Affected Versions: slackero phpwcms versions up to 1.9.26 Description: A vulnerability was found in the SVG File Handler component of slackero phpwcms, which can be exploited to lead to cross site scripting. The manipulation can be initiated remotely...

6.1CVSS6.5AI score0.00246EPSS
Exploits0References8
OSV
OSV
added 2022/12/30 12:15 p.m.10 views

CVE-2017-20152

A vulnerability, which was classified as problematic, was found in aerouk imageserve. Affected is an unknown function of the file public/viewer.php of the component File Handler. The manipulation of the argument filelocation leads to path traversal. It is possible to launch the attack remotely. T...

7.5CVSS6.8AI score
Exploits0References4
Prion
Prion
added 2022/12/30 12:15 p.m.11 views

Path traversal

A vulnerability, which was classified as problematic, was found in aerouk imageserve. Affected is an unknown function of the file public/viewer.php of the component File Handler. The manipulation of the argument filelocation leads to path traversal. It is possible to launch the attack remotely. T...

5CVSS7.6AI score0.00492EPSS
Exploits1References4
Cvelist
Cvelist
added 2022/12/30 11:42 a.m.13 views

CVE-2017-20152 aerouk imageserve File viewer.php path traversal

A vulnerability, which was classified as problematic, was found in aerouk imageserve. Affected is an unknown function of the file public/viewer.php of the component File Handler. The manipulation of the argument filelocation leads to path traversal. It is possible to launch the attack remotely. T...

3.1CVSS7.6AI score0.00492EPSS
Exploits1References4
OSV
OSV
added 2022/12/30 10:15 a.m.0 views

CVE-2022-4857

A vulnerability was found in Modbus Tools Modbus Poll up to 9.10.0 and classified as critical. Affected by this issue is some unknown functionality of the file mbpoll.exe of the component mbp File Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit...

7.8CVSS6AI score
Exploits0References4
OSV
OSV
added 2022/12/30 10:15 a.m.0 views

CVE-2022-4856

A vulnerability has been found in Modbus Tools Modbus Slave up to 7.5.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file mbslave.exe of the component mbs File Handler. The manipulation leads to buffer overflow. The attack can be launched remotely...

7.8CVSS5.9AI score
Exploits0References4
Cvelist
Cvelist
added 2022/12/30 9:2 a.m.10 views

CVE-2022-4856 Modbus Tools Modbus Slave mbs File mbslave.exe buffer overflow

A vulnerability has been found in Modbus Tools Modbus Slave up to 7.5.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file mbslave.exe of the component mbs File Handler. The manipulation leads to buffer overflow. The attack can be launched remotely...

6.3CVSS8AI score0.00357EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/12/30 12:0 a.m.2 views

PT-2022-28141 · Unknown · Modbus Tools Modbus Slave

Name of the Vulnerable Software and Affected Versions: Modbus Tools Modbus Slave versions up to 7.5.1 Description: A critical issue has been found in the mbs File Handler component, specifically in the file mbslave.exe, leading to a buffer overflow. This can be exploited remotely. The issue affec...

7.8CVSS7.3AI score0.00357EPSS
Exploits1References8
OSV
OSV
added 2022/12/28 9:15 p.m.15 views

CVE-2022-4821

A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated...

6.1CVSS6.2AI score
Exploits0References4
NVD
NVD
added 2022/12/28 9:15 p.m.9 views

CVE-2022-4821

A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated...

6.1CVSS0.00313EPSS
Exploits0References4
Prion
Prion
added 2022/12/28 9:15 p.m.14 views

Cross site scripting

A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated...

5.8CVSS6AI score0.00313EPSS
Exploits0References4
Cvelist
Cvelist
added 2022/12/28 8:45 p.m.15 views

CVE-2022-4821 FlatPress XML File Handler/MD File admin.uploader.php onupload cross site scripting

A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated...

2.4CVSS6.5AI score0.00313EPSS
Exploits0References4
NVD
NVD
added 2022/12/25 11:15 a.m.12 views

CVE-2020-36628

A vulnerability classified as critical has been found in Calsign APDE. This affects the function handleExtract of the file APDE/src/main/java/com/calsignlabs/apde/build/dag/CopyBuildTask.java of the component ZIP File Handler. The manipulation leads to path traversal. Upgrading to version...

9.8CVSS0.00739EPSS
Exploits0References3
Rows per page
Query Builder