Lucene search
+L

14424 matches found

NVD
NVD
added 2023/12/14 8:15 p.m.29 views

CVE-2023-49294

Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, it is possible to read any arbitrary file even when the livedangerously is not enabled. This allows arbitrary fil...

7.5CVSS0.4557EPSS
SaveExploits3References4
OSV
OSV
added 2023/12/14 7:40 p.m.43 views

CVE-2023-49294 Asterisk Path Traversal vulnerability

Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, it is possible to read any arbitrary file even when the livedangerously is not enabled. This allows arbitrary fil...

4.9CVSS7.3AI score
SaveExploits0References6
Cvelist
Cvelist
added 2023/12/14 7:40 p.m.56 views

CVE-2023-49294 Asterisk Path Traversal vulnerability

Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, it is possible to read any arbitrary file even when the livedangerously is not enabled. This allows arbitrary fil...

4.9CVSS7.6AI score0.4557EPSS
SaveExploits3References4
Debian CVE
Debian CVE
added 2023/12/14 7:40 p.m.69 views

CVE-2023-49294

Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, it is possible to read any arbitrary file even when the livedangerously is not enabled. This allows arbitrary fil...

7.5CVSS7.4AI score0.4557EPSS
SaveExploits3
OSV
OSV
added 2023/12/14 4:15 p.m.11 views

CVE-2023-48661

Dell vApp Manager, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A remote malicious user with high privileges could potentially exploit this vulnerability to read arbitrary files from the target system...

4.9CVSS5.9AI score0.00588EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/14 4:15 p.m.32 views

CVE-2023-48661

Dell vApp Manager, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A remote malicious user with high privileges could potentially exploit this vulnerability to read arbitrary files from the target system...

4.9CVSS0.00588EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/14 4:15 p.m.22 views

CVE-2023-48660

Dell vApp Manger, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A remote attacker could potentially exploit this vulnerability to read arbitrary files from the target system...

7.5CVSS0.00922EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/14 4:15 p.m.22 views

Design/Logic Flaw

Dell vApp Manager, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A remote malicious user with high privileges could potentially exploit this vulnerability to read arbitrary files from the target system...

3.3CVSS7.1AI score0.00588EPSS
SaveExploits0References1Affected Software3
Prion
Prion
added 2023/12/14 4:15 p.m.22 views

Design/Logic Flaw

Dell vApp Manger, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A remote attacker could potentially exploit this vulnerability to read arbitrary files from the target system...

5CVSS7.1AI score0.00922EPSS
SaveExploits0References1Affected Software3
CVE
CVE
added 2023/12/14 3:55 p.m.78 views

CVE-2023-48661

Dell vApp Manager prior to 9.2.4.x is affected by an arbitrary file read vulnerability. A remote attacker with high privileges could read arbitrary files from the target system. The issue is documented across multiple sources (NVD entry CVE-2023-48661 and related CNVD/PT advisories) and is trigge...

4.9CVSS5.1AI score0.00588EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
added 2023/12/14 3:55 p.m.31 views

CVE-2023-48661

Dell vApp Manager, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A remote malicious user with high privileges could potentially exploit this vulnerability to read arbitrary files from the target system...

4.9CVSS5.4AI score0.00588EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/14 3:51 p.m.48 views

CVE-2023-48660

Dell Virtual Appliance Manager (Dell vApp Manger) is affected by CVE-2023-48660. The vulnerability exists in versions prior to 9.2.4.x and allows a remote attacker to read arbitrary files from the target system, impacting confidentiality. The CVSS from NVD/EU sources indicates network access, low...

7.5CVSS7.4AI score0.00922EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
added 2023/12/14 3:51 p.m.29 views

CVE-2023-48660

Dell vApp Manger, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A remote attacker could potentially exploit this vulnerability to read arbitrary files from the target system...

7.5CVSS7.6AI score0.00922EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/14 12:00 a.m.12 views

Dell Virtual Appliance Manager 安全漏洞

Dell Virtual Appliance Manager is a virtual appliance manager from Dell USA. An arbitrary file read vulnerability exists in Dell Virtual Appliance Manager, which can be exploited by an attacker to read arbitrary files from the target system...

4.9CVSS6.7AI score0.00588EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/12/14 12:00 a.m.17 views

Asterisk Path Traversal Vulnerability

Asterisk is a software for PBX systems that runs on Linux and supports IP calls using SIP, IAX, and H323 protocols. A path traversal vulnerability exists in Asterisk versions prior to 18.20.1, prior to 20.5.1, and prior to 21.0.1, and in Certified-asterisk versions prior to 18.9-cert6, which stem...

7.5CVSS6.8AI score0.4557EPSS
SaveExploits3References6
CNNVD
CNNVD
added 2023/12/14 12:00 a.m.9 views

Dell Virtual Appliance Manager 路径遍历漏洞

Dell Virtual Appliance Manager is a virtual appliance manager from Dell USA. An arbitrary file read vulnerability exists in Dell Virtual Appliance Manager, which can be exploited by an attacker to read arbitrary files from the target system...

7.5CVSS6.7AI score0.00922EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2023/12/14 12:00 a.m.34 views

CVE-2023-49294

Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, it is possible to read any arbitrary file even when the livedangerously is not enabled. This allows arbitrary fil...

7.5CVSS7AI score0.4557EPSS
SaveExploits3References1
Cvelist
Cvelist
added 2023/12/13 9:09 p.m.28 views

CVE-2023-47624 Audiobookshelf Arbitrary File Read Vulnerability

Audiobookshelf is a self-hosted audiobook and podcast server. In versions 2.4.3 and prior, any user regardless of their permissions may be able to read files from the local file system due to a path traversal in the /hls endpoint. This issue may lead to Information Disclosure. As of time of...

7.5CVSS7.5AI score0.00826EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/12/13 9:02 p.m.8 views

CVE-2023-47619 Audiobookshelf Server-Side Request Forgery and Arbitrary File Read Vulnerability

Audiobookshelf is a self-hosted audiobook and podcast server. In versions 2.4.3 and prior, users with the update permission are able to read arbitrary files, delete arbitrary files and send a GET request to arbitrary URLs and read the response. This issue may lead to Information Disclosure. As of...

8.1CVSS8AI score0.00607EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/12/13 9:02 p.m.33 views

CVE-2023-47619 Audiobookshelf Server-Side Request Forgery and Arbitrary File Read Vulnerability

Audiobookshelf is a self-hosted audiobook and podcast server. In versions 2.4.3 and prior, users with the update permission are able to read arbitrary files, delete arbitrary files and send a GET request to arbitrary URLs and read the response. This issue may lead to Information Disclosure. As of...

8.1CVSS8.1AI score0.00607EPSS
SaveExploits1References2
Rows per page
Query Builder