Lucene search
+L

99 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 4:58 a.m.•13 views

CVE-2023-6930

EuroTel ETL3100 versions v01c01 and v01x37 suffer from an unauthenticated configuration and log download vulnerability. This enables the attacker to disclose sensitive information and assist in authentication bypass, privilege escalation, and full system access...

9.8CVSS6.7AI score0.00821EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/02/08 4:39 a.m.•17 views

CVE-2025-22978

eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...

9.8CVSS7.1AI score0.00557EPSS
SaveExploits1References1
NVD
NVD
•added 2025/02/03 8:15 p.m.•23 views

CVE-2025-22978

eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...

9.8CVSS0.00557EPSS
SaveExploits1References2
OSV
OSV
•added 2025/02/03 12:00 a.m.•15 views

CVE-2025-22978

eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...

9.8CVSS7AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2025/02/03 12:00 a.m.•12 views

ELADMIN 安全漏洞

ELADMIN is a backend management system for elunez individual developers. A security vulnerability exists in ELADMIN 2.7 and earlier versions, which stems from a CSV injection issue in the Exception Log Download module...

9.8CVSS7AI score0.00557EPSS
SaveExploits1References1
CVE
CVE
•added 2025/02/03 12:00 a.m.•521 views

CVE-2025-22978

The eladmin backend management system (versions

9.8CVSS7.4AI score0.00557EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/03 12:00 a.m.•3 views

CVE-2025-22978: Improper Neutralization of Special Elements in Output Used by a Downstream Component

eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...

9.8CVSS5.8AI score0.00557EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/02/03 12:00 a.m.•15 views

PT-2025-4755 · Eladmin · Eladmin

Name of the Vulnerable Software and Affected Versions: eladmin versions =2.7 Description: The issue concerns CSV injection in the exception log download module. This allows for potential data manipulation or extraction. No information is provided about the estimated number of affected devices or...

9.8CVSS7.3AI score0.00557EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/02/03 12:00 a.m.•10 views

CVE-2025-22978

eladmin =2.7 is vulnerable to CSV Injection in the exception log download module...

7.4AI score0.00557EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•25 views

PT-2025-1964 · Wp Guru · Error Log Viewer By Wp Guru

Name of the Vulnerable Software and Affected Versions: Error Log Viewer By WP Guru plugin for WordPress versions up to, and including, 1.0.1.3 Description: The issue allows unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information, vi...

7.5CVSS7AI score0.46858EPSS
SaveExploits1References8
OSV
OSV
•added 2024/10/03 4:15 p.m.•14 views

CVE-2024-41922

A directory traversal vulnerability exists in the log files download functionality of Veertu Anka Build 1.42.0. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability...

7.5CVSS5.8AI score0.08072EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/10/03 12:00 a.m.•13 views

PT-2024-29635 · Veertu · Veertu Anka Build

Name of the Vulnerable Software and Affected Versions: Veertu Anka Build version 1.42.0 Description: A directory traversal vulnerability exists in the log files download functionality. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an...

7.5CVSS6.8AI score0.08072EPSS
SaveExploits1References9
Vulnrichment
Vulnrichment
•added 2024/03/20 12:00 a.m.•17 views

CVE-2024-22079

An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. Directory traversal can occur via the system logs download mechanism...

6.9AI score0.01016EPSS
SaveExploits0References1
OSV
OSV
•added 2024/01/19 3:15 p.m.•15 views

CVE-2024-0716

A vulnerability classified as problematic has been found in Byzoro Smart S150 Management Platform V31R02B15. This affects an unknown part of the file /log/download.php of the component Backup File Handler. The manipulation leads to information disclosure. It is possible to initiate the attack...

5.3CVSS4.5AI score0.01208EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/01/19 12:00 a.m.•21 views

PT-2024-15776 · Byzoro · Byzoro Smart S150 Management Platform

Name of the Vulnerable Software and Affected Versions: Byzoro Smart S150 Management Platform version V31R02B15 Description: A vulnerability has been found in the Byzoro Smart S150 Management Platform, affecting an unknown part of the file /log/download.php of the component Backup File Handler. Th...

5.3CVSS4.2AI score0.01208EPSS
SaveExploits1References8
OSV
OSV
•added 2024/01/08 7:15 p.m.•22 views

CVE-2023-6383

The Debug Log Manager WordPress plugin before 2.3.0 contains a Directory listing vulnerability was discovered, which allows you to download the debug log without authorization and gain access to sensitive data...

7.5CVSS5.8AI score0.00647EPSS
SaveExploits2References1
OSV
OSV
•added 2023/12/19 11:15 p.m.•15 views

CVE-2023-6930

EuroTel ETL3100 versions v01c01 and v01x37 suffer from an unauthenticated configuration and log download vulnerability. This enables the attacker to disclose sensitive information and assist in authentication bypass, privilege escalation, and full system access...

9.8CVSS5.7AI score0.00821EPSS
SaveExploits1References1
NVD
NVD
•added 2023/12/19 11:15 p.m.•29 views

CVE-2023-6930

EuroTel ETL3100 versions v01c01 and v01x37 suffer from an unauthenticated configuration and log download vulnerability. This enables the attacker to disclose sensitive information and assist in authentication bypass, privilege escalation, and full system access...

9.8CVSS0.00821EPSS
SaveExploits1References1
Prion
Prion
•added 2023/12/19 11:15 p.m.•29 views

Authentication flaw

EuroTel ETL3100 versions v01c01 and v01x37 suffer from an unauthenticated configuration and log download vulnerability. This enables the attacker to disclose sensitive information and assist in authentication bypass, privilege escalation, and full system access...

7.5CVSS7AI score0.00821EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2023/12/19 11:04 p.m.•53 views

CVE-2023-6930

CVE-2023-6930 concerns EuroTel ETL3100 variants v01c01/v01x37, affected by an unauthenticated configuration and log download vulnerability (Insecure Access/Improper Access Control). The root cause is unauthenticated access to configuration and logs, enabling an attacker to disclose sensitive info...

9.8CVSS9.5AI score0.00821EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder