Lucene search
+L

80 matches found

OSV
OSV
added 2023/11/20 10:15 a.m.8 views

USN-6486-1 iniparser vulnerability

It was discovered that iniParser incorrectly handled certain files. An attacker could possibly use this issue to cause a crash...

5.5CVSS5.8AI score0.0041EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/06/16 12:0 a.m.8 views

BroadcomCA Automic Automation 安全漏洞

Broadcom CA Automic Automation is an automation product from Broadcom, Inc. It provides a service orchestration and automation platform to automate complex applications, platforms, and technology environments. A security vulnerability exists in Broadcom CA Automic Automation versions 12.2 and 12....

8.8CVSS7.9AI score0.00855EPSS
Exploits0References3
NVD
NVD
added 2022/06/13 11:15 p.m.13 views

CVE-2021-41662

The South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that can be chained with a malicious PHP file upload, which is caused by improper file handling in the editImg function. This vulnerability leads to remote code execution...

9.8CVSS0.02013EPSS
Exploits1References1
Prion
Prion
added 2022/06/13 11:15 p.m.19 views

Sql injection

The South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that can be chained with a malicious PHP file upload, which is caused by improper file handling in the editImg function. This vulnerability leads to remote code execution...

7.5CVSS9.9AI score0.02013EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/06/13 12:0 a.m.5 views

South Gate Inn Online Reservation System SQL注入漏洞

South Gate Inn Online Reservation System is a hotel online reservation system by Janobe Individual Developer. A security vulnerability exists in South Gate Inn Online Reservation System v1.0, which stems from improper file handling in the editImg function and can be exploited by an attacker to...

9.8CVSS8.3AI score0.02013EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/03/21 4:52 p.m.20 views

CVE-2022-26960

connector.minimal.php in std42 elFinder through 2.1.60 is affected by path traversal. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths...

9.5AI score0.50993EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/01/18 12:0 a.m.9 views

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab CE/EE that stems from incorrect file...

8.6CVSS7.8AI score0.01659EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/12/01 12:0 a.m.7 views

The vulnerability of the Windows Backup Service allows attackers to exploit their privileges.

The vulnerability of the Windows Backup Service in operating systems involves improper handling of file operations. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.2AI score0.00908EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/11/26 12:0 a.m.7 views

The vulnerability of the Windows Backup Service allows attackers to exploit their privileges.

The vulnerability of the Windows Backup Service in operating systems involves improper handling of file operations. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.2AI score0.00908EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/10/20 12:0 a.m.8 views

The vulnerability of the Windows operating system’s backup service allows attackers to exploit their privileges.

The vulnerability of the Windows operating system’s backup service is related to improper handling of file operations. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00908EPSS
Exploits0References3
OSV
OSV
added 2020/10/16 11:15 p.m.2 views

CVE-2020-16972

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges...

7.8CVSS7.2AI score0.00908EPSS
Exploits0References1
OSV
OSV
added 2020/10/16 11:15 p.m.2 views

CVE-2020-16975

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges...

7.8CVSS5.9AI score0.00908EPSS
Exploits0References1
OSV
OSV
added 2020/10/16 11:15 p.m.1 views

CVE-2020-16936

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges...

7.8CVSS7.2AI score0.009EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2020/10/13 12:0 a.m.2 views

PT-2020-4339 · Microsoft · Windows Backup Service +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Service affected versions not specified Description: The issue is related to improper handling of file operations by the Windows Backup Service, which can lead to an elevation of privilege. This occurs due to errors in handling...

7.8CVSS7.4AI score0.00908EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2020/10/13 12:0 a.m.6 views

PT-2020-4321 · Microsoft · Windows Backup Service +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Service affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that exists when the Windows Backup Service improperly handles file operations. To exploit this, an attacker...

7.8CVSS7.4AI score0.00927EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2020/10/13 12:0 a.m.3 views

PT-2020-4276 · Microsoft · Windows Backup Service +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Service affected versions not specified Description: The issue is related to the improper handling of file operations by the Windows Backup Service, which can allow an attacker to elevate their privileges. To exploit this, an...

7.8CVSS7.4AI score0.00908EPSS
Exploits0References7
OSV
OSV
added 2020/08/17 7:15 p.m.1 views

CVE-2020-1537

An elevation of privilege vulnerability exists when the Windows Remote Access improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need code execution on a victim system...

7.8CVSS7.7AI score0.00795EPSS
Exploits0References1
OSV
OSV
added 2020/08/17 7:15 p.m.7 views

CVE-2020-1455

A denial of service vulnerability exists when Microsoft SQL Server Management Studio SSMS improperly handles files. An attacker could exploit the vulnerability to trigger a denial of service. To exploit the vulnerability, an attacker would first require execution on the victim system. The securit...

5.3CVSS6.8AI score0.01228EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2020/08/11 12:0 a.m.6 views

PT-2020-3730 · Microsoft · Sql Server Management Studio

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server Management Studio affected versions not specified Description: A denial of service issue exists due to improper handling of files by Microsoft SQL Server Management Studio. An attacker could exploit this to trigger a deni...

6.8CVSS6.3AI score0.01228EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2020/07/24 12:0 a.m.6 views

The vulnerability of the diagnostic tool for Mobile Device Management applications, which allows attackers to escalate their privileges.

The vulnerability of the diagnostic tool for Mobile Device Management MDM applications that diagnose Windows operating systems is related to improper handling of files. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7.1CVSS7.2AI score0.0076EPSS
Exploits0References2
Rows per page
Query Builder