Lucene search
K

10 matches found

Nuclei
Nuclei
added yesterday4 views

Oliver 5 Library Server <8.00.008.053 - Local File Inclusion

Oliver 5 Library Server versions prior to 8.00.008.053 are vulnerable to local file inclusion via the FileServlet function. id: CVE-2021-45027 info: name: Oliver 5 Library Server 8.00.008.053 - Local File Inclusion author: gy741 severity: high description: Oliver 5 Library Server versions prior t...

7.5CVSS7.1AI score0.17351EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2026/01/16 4:20 p.m.4 views

CVE-2021-47755

Oliver Library Server v5 contains a file download vulnerability that allows unauthenticated attackers to access arbitrary system files through unsanitized input in the FileServlet endpoint. Attackers can exploit the vulnerability by manipulating the 'fileName' parameter to download sensitive file...

8.7CVSS7AI score0.00065EPSS
Exploits1References1
OSV
OSV
added 2026/01/15 4:16 p.m.0 views

CVE-2021-47755

Oliver Library Server v5 contains a file download vulnerability that allows unauthenticated attackers to access arbitrary system files through unsanitized input in the FileServlet endpoint. Attackers can exploit the vulnerability by manipulating the 'fileName' parameter to download sensitive file...

7.5CVSS5.9AI score0.00065EPSS
Exploits1References2
CVE
CVE
added 2026/01/15 3:52 p.m.4 views

CVE-2021-47755

Oliver Library Server v5 is affected by an unauthenticated arbitrary file download via the FileServlet endpoint. The root cause is unsanitized input in the fileName parameter, enabling attackers to download arbitrary files from the server filesystem. This impact is described across multiple sourc...

8.7CVSS6.7AI score0.00065EPSS
Exploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/15 3:52 p.m.0 views

CVE-2021-47755

Oliver Library Server v5 contains a file download vulnerability that allows unauthenticated attackers to access arbitrary system files through unsanitized input in the FileServlet endpoint. Attackers can exploit the vulnerability by manipulating the 'fileName' parameter to download sensitive file...

8.7CVSS5.7AI score0.00065EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2026/01/15 3:52 p.m.19 views

CVE-2021-47755 Oliver Library Server v5 - Arbitrary File Download

Oliver Library Server v5 contains a file download vulnerability that allows unauthenticated attackers to access arbitrary system files through unsanitized input in the FileServlet endpoint. Attackers can exploit the vulnerability by manipulating the 'fileName' parameter to download sensitive file...

8.7CVSS0.00065EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/01/15 3:52 p.m.2 views

CVE-2021-47755 Oliver Library Server v5 - Arbitrary File Download

Oliver Library Server v5 contains a file download vulnerability that allows unauthenticated attackers to access arbitrary system files through unsanitized input in the FileServlet endpoint. Attackers can exploit the vulnerability by manipulating the 'fileName' parameter to download sensitive file...

8.7CVSS6.7AI score0.00065EPSS
Exploits1References2
EUVD
EUVD
added 2026/01/15 3:52 p.m.1 views

EUVD-2026-2777

Oliver Library Server v5 contains a file download vulnerability that allows unauthenticated attackers to access arbitrary system files through unsanitized input in the FileServlet endpoint. Attackers can exploit the vulnerability by manipulating the 'fileName' parameter to download sensitive file...

9.8CVSS6.5AI score0.00065EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.2 views

PT-2026-3032

Name of the Vulnerable Software and Affected Versions Oliver Library Server version 5 Description An unauthenticated attacker can access arbitrary system files. This is possible due to unsanitized input in the FileServlet endpoint. The vulnerability is triggered by manipulating the fileName...

9.8CVSS5.6AI score0.00065EPSS
Exploits1References6
Exploit DB
Exploit DB
added 2021/12/15 12:0 a.m.363 views

Oliver Library Server v5 - Arbitrary File Download

Exploit Title: Oliver Library Server v5 - Arbitrary File Download Date: 14/12/2021 Exploit Authors: Mandeep Singh, Ishaan Vij, Luke Blues, CTRL Group Vendor Homepage: https://www.softlinkint.com/product/oliver/ Product: Oliver Server v5 Version: /oliver/FileServlet?source=serverFile&fileName= 2...

7.4AI score
Exploits0
Rows per page
Query Builder