Lucene search
+L

7040 matches found

CNNVD
CNNVD
added 2025/01/07 12:0 a.m.10 views

WordPress plugin SEO LAT Auto Post 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

9.8CVSS8.4AI score0.03171EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.7 views

PT-2025-28866

Name of the Vulnerable Software and Affected Versions: git in Debian Linux affected versions not specified Description: A flaw exists in Git GUI that allows for the creation and overwriting of arbitrary writable files. This occurs when a user clones an untrusted repository and is subsequently...

8.6CVSS8.2AI score0.02839EPSS
SaveExploits9References130
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.7 views

PT-2025-36328

Name of the Vulnerable Software and Affected Versions podman versions 4.0.0 through 5.6.1 Description A vulnerability exists in podman where an attacker can use the kube play command to overwrite host files. This occurs when the kube file contains a Secret or a ConfigMap volume mount, and that...

8.5CVSS7.3AI score0.0108EPSS
SaveExploits0
Cvelist
Cvelist
added 2024/12/24 5:20 a.m.23 views

CVE-2024-41887 Arbitrary File Overwrite

Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. An attacker can create an NVR log file in a directory one level higher on the system, which can be used to corrupt files in the directory. The manufacturer has released patch firmware for the...

5.1CVSS0.01116EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/24 5:20 a.m.9 views

CVE-2024-41887 Arbitrary File Overwrite

Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the NVR. An attacker can create an NVR log file in a directory one level higher on the system, which can be used to corrupt files in the directory. The manufacturer has released patch firmware for the...

5.1CVSS7.8AI score0.01116EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/24 5:20 a.m.81 views

CVE-2024-41887

CVE-2024-41887 affects NVR devices where a flaw lets an attacker remotely execute code by creating a log file in a parent directory, enabling file corruption. Root cause: unauthorized log handling/creation path that allows privilege-impacting actions on the system. Impact: potential remote code e...

5.1CVSS7.5AI score0.01116EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2024/12/19 2:54 p.m.4 views

hornetq-core-client: Arbitrarily overwrite files or access sensitive information

A flaw was found in the createTempFile method of hornetq. Affected version of hornetq allows attackers to arbitrarily overwrite files or access sensitive information...

9.1CVSS5.7AI score0.0067EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2024/12/19 2:40 p.m.4 views

hornetq-core-client: Arbitrarily overwrite files or access sensitive information

A flaw was found in the createTempFile method of hornetq. Affected version of hornetq allows attackers to arbitrarily overwrite files or access sensitive information...

9.1CVSS5.7AI score0.0067EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2024/12/19 2:36 p.m.4 views

hornetq-core-client: Arbitrarily overwrite files or access sensitive information

A flaw was found in the createTempFile method of hornetq. Affected version of hornetq allows attackers to arbitrarily overwrite files or access sensitive information...

9.1CVSS5.7AI score0.0067EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
added 2024/12/19 1:0 p.m.5 views

hornetq-core-client: Arbitrarily overwrite files or access sensitive information

A flaw was found in the createTempFile method of hornetq. Affected version of hornetq allows attackers to arbitrarily overwrite files or access sensitive information...

9.1CVSS5.7AI score0.0067EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2024/12/19 12:0 a.m.9 views

RHEL 7 / 8 / 9 : Red Hat JBoss Enterprise Application Platform 7.4 (RHSA-2024:11529)

The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:11529 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This...

9.1CVSS6.9AI score0.0067EPSS
SaveExploits1References6
Mageia
Mageia
added 2024/12/17 7:42 p.m.33 views

Updated socat packages fix security vulnerability

CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp directory in socat readline.sh...

9.8CVSS7.1AI score0.008EPSS
SaveExploits0References2
OSV
OSV
added 2024/12/17 7:42 p.m.9 views

MGASA-2024-0390 Updated socat packages fix security vulnerability

CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp directory in socat readline.sh...

9.8CVSS9.5AI score0.008EPSS
SaveExploits0References3
SUSE Linux
SUSE Linux
added 2024/12/17 8:36 a.m.7 views

Security update for socat

This update for socat fixes the following issues: CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp directory bsc1225462 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can...

5CVSS7.5AI score0.008EPSS
SaveExploits0References4
OSV
OSV
added 2024/12/17 8:36 a.m.11 views

SUSE-SU-2024:4348-1 Security update for socat

This update for socat fixes the following issues: - CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp directory bsc1225462...

9.8CVSS9.6AI score0.008EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/12/16 12:0 a.m.15 views

H2O-3 Arbitrary File Overwrite (CVE-2024-6854)

An arbitrary file overwrite vulnerability exists in H2O-3. The endpoint that allows for exporting models & does not limit where models can be exported to. As such an attacker can export a model to any file in the server file structure, overwriting it, by simply using the force flag. Note that...

7.1CVSS7.1AI score0.0071EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2024/12/14 12:0 a.m.6 views

SUSE SLES12 Security Update : socat (SUSE-SU-2024:4294-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:4294-1 advisory. - CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp directory bsc1225462 Tenable has extracted the preceding description block direct...

9.8CVSS7.1AI score0.008EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2024/12/13 12:0 a.m.10 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : socat (SUSE-SU-2024:4302-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:4302-1 advisory. - CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp directory bsc1225462 Tenable has...

9.8CVSS7.1AI score0.008EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2024/12/13 12:0 a.m.13 views

openSUSE Security Advisory (SUSE-SU-2024:4302-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS5.7AI score0.008EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2024/12/13 12:0 a.m.11 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : socat (SUSE-SU-2024:4295-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:4295-1 advisory. - CVE-2024-54661: Fixed arbitrary file overwrite via predictable /tmp directory in socat readline.sh...

9.8CVSS7.1AI score0.008EPSS
SaveExploits0References4
Rows per page
Query Builder