Lucene search
+L

1674 matches found

Cvelist
Cvelist
added 2020/02/26 3:06 p.m.32 views

CVE-2019-19993

An issue was discovered in Selesta Visual Access Manager VAM 4.15.0 through 4.29. Several full path disclosure vulnerability were discovered. A user, even with no authentication, may simply send arbitrary content to the vulnerable pages to generate error messages that expose some full paths...

5.3AI score0.01243EPSS
SaveExploits1References3
NVD
NVD
added 2020/02/03 3:15 p.m.32 views

CVE-2013-2624

Telean before 1.3.1 contains a full path disclosure vulnerability which could allow remote attackers to obtain sensitive information through a specially crafted URL request...

5.3CVSS5AI score0.06492EPSS
SaveExploits3References2
NVD
NVD
added 2020/02/03 3:15 p.m.34 views

CVE-2013-2631

TinyWebGallery TWG 1.8.9 and earlier contains a full path disclosure vulnerability which allows remote attackers to obtain sensitive information through the parameters "twgbrowserx" and "twgbrowsery" in the page image.php...

5.3CVSS5.1AI score0.01755EPSS
SaveExploits2References2
Prion
Prion
added 2020/02/03 3:15 p.m.24 views

Path traversal

TinyWebGallery TWG 1.8.9 and earlier contains a full path disclosure vulnerability which allows remote attackers to obtain sensitive information through the parameters "twgbrowserx" and "twgbrowsery" in the page image.php...

5CVSS6.5AI score0.01755EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2020/02/03 2:46 p.m.40 views

CVE-2013-2631

TinyWebGallery TWG 1.8.9 and earlier contains a full path disclosure vulnerability which allows remote attackers to obtain sensitive information through the parameters "twgbrowserx" and "twgbrowsery" in the page image.php...

5AI score0.01755EPSS
SaveExploits2References2
CVE
CVE
added 2020/02/03 2:39 p.m.67 views

CVE-2013-2624

Telaen before 1.3.1 is affected by a path-disclosure vulnerability that can reveal sensitive information via specially crafted URLs (full path disclosure through redir.php), with additional issues including remote redirection and reflected XSS in older versions (Telaen <= 1.3.0). The CVE entry...

5.3CVSS5.2AI score0.06492EPSS
SaveExploits3References2Affected Software1
Cvelist
Cvelist
added 2020/02/03 2:39 p.m.46 views

CVE-2013-2624

Telean before 1.3.1 contains a full path disclosure vulnerability which could allow remote attackers to obtain sensitive information through a specially crafted URL request...

5.2AI score0.06492EPSS
SaveExploits3References2
CNVD
CNVD
added 2019/11/26 12:00 a.m.11 views

Nokia IMPACT path traversal vulnerability (CNVD-2019-44224)

Nokia IMPACT is a suite of intelligent management platforms for the Internet of Things IoT from the Finnish company Nokia. A path traversal vulnerability exists in Nokia IMPACT. An attacker can exploit this vulnerability to disclose the full path...

4.3CVSS6.7AI score0.00973EPSS
SaveExploits1References1
NVD
NVD
added 2019/11/25 3:15 p.m.26 views

CVE-2019-17404

Nokia IMPACT 18A: allows full path disclosure...

4.3CVSS4.6AI score0.00973EPSS
SaveExploits1References2
OSV
OSV
added 2019/11/25 3:15 p.m.13 views

CVE-2019-17404

Nokia IMPACT 18A: allows full path disclosure...

4.3CVSS5.8AI score0.00973EPSS
SaveExploits1References2
CVE
CVE
added 2019/11/25 2:48 p.m.64 views

CVE-2019-17404

CVE-2019-17404 concerns Nokia IMPACT before version 18A, where a path traversal flaw allows an attacker to disclose the full filesystem path. The issue is described across multiple sources (CNVD-2019-44224, Red Hat RH:CVE-2019-17404, NVD CVE-2019-17404). The connected documents do not provide exp...

4.3CVSS4.5AI score0.00973EPSS
SaveExploits1References2Affected Software1
Packet Storm
Packet Storm
added 2019/11/11 12:00 a.m.249 views

Honeywell MCR Web Controller Cross Site Scripting / Path Disclosure

Honeywell MCR Web Controller Full Path Disclosure & Cross Site Scripting Vendor Homepage: https://www.honeywell.com WebVersion: XL1000C50 EXCEL WEB 52 I/O, XL1000C500 EXCEL WEB 300 I/O, XL1000C100 EXCEL WEB 104 I/O, XL1000C1000 EXCEL WEB 600 I/O, XL1000C50U EXCEL WEB 52 I/O UUKL, XL1000C500U EXCE...

0.2AI score
SaveExploits0
WPVulnDB
WPVulnDB
added 2019/10/16 12:00 a.m.18 views

Fast Velocity Minify < 2.7.7 - Full Path Disclosure

The Fast Velocity Minify WordPress plugin was affected by a Full Path Disclosure security vulnerability...

3.5CVSS1.6AI score0.01161EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2019/08/22 7:15 p.m.36 views

CVE-2014-10388

The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure...

5.3CVSS5.4AI score0.01332EPSS
SaveExploits0References1
Prion
Prion
added 2019/08/22 7:15 p.m.24 views

Path traversal

The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has full path disclosure...

5CVSS7.1AI score0.01332EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/08/22 6:55 p.m.59 views

CVE-2014-10388

CVE-2014-10388 affects the WordPress plugin wp-support-plus-responsive-ticket-system prior to version 4.2. Multiple connected sources (RH, NVD, CVE lists, WPVulnDB) consistently describe a full path disclosure vulnerability in this plugin, enabling disclosure of server file paths. Public details ...

5.3CVSS5.3AI score0.01332EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2019/07/17 12:00 a.m.12 views

Unspecified Vulnerability in CouchCMS

CouchCMS is an open source content management system CMS for designers. A security vulnerability exists in the includes/mysql2i/mysql2i.func.php and adds/phpmailer/phpmailer.php files in CouchCMS version 2. An attacker can exploit the vulnerability to disclose the full path...

6.8AI score
SaveExploits0References1
WPVulnDB
WPVulnDB
added 2019/07/05 12:00 a.m.13 views

Gallery Photoblocks < 1.1.41 - Unauthenticated Reflected XSS

Also Full Path Disclosure depending on the configuration of the server PoC https:///wp-content/plugins/photoblocks-grid-gallery/admin/partials/photoblocks-edit.php?id="...

0.6AI score
SaveExploits0References1Affected Software1
NVD
NVD
added 2019/06/18 4:15 p.m.22 views

CVE-2018-18839

An issue was discovered in Netdata 1.10.0. Full Path Disclosure FPD exists via api/v1/alarms. NOTE: the vendor says "is intentional...

5.3CVSS5.2AI score0.01867EPSS
SaveExploits0References3
OSV
OSV
added 2019/06/18 4:15 p.m.11 views

CVE-2018-18839

An issue was discovered in Netdata 1.10.0. Full Path Disclosure FPD exists via api/v1/alarms. NOTE: the vendor says "is intentional...

5.3CVSS5.2AI score
SaveExploits0References3
Rows per page
Query Builder