Lucene search
+L

86 matches found

Debian CVE
Debian CVE
added 2026/04/23 8:26 p.m.13 views

CVE-2026-6940

radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recursively delete arbitrary directories by supplying absolute paths that escape the configured dir.projects root directory. Attackers can craft absolute paths to project marker files...

7.1CVSS5.5AI score0.00218EPSS
SaveExploits1
CVE
CVE
added 2026/04/23 8:26 p.m.39 views

CVE-2026-6940

CVE-2026-6940 : radare2 versions before 6.1.4 contain a path traversal vulnerability in the project deletion feature. A local attacker can supply absolute paths that escape the dir.projects root to recursively delete arbitrary directories, by targeting project marker files outside the project sto...

7.1CVSS5.9AI score0.00218EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/04/23 8:26 p.m.11 views

CVE-2026-6940 radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion

radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recursively delete arbitrary directories by supplying absolute paths that escape the configured dir.projects root directory. Attackers can craft absolute paths to project marker files...

6.9CVSS6AI score
SaveExploits0References5
CNNVD
CNNVD
added 2026/04/23 12:00 a.m.17 views

Radare2 路径遍历漏洞

Radare2 is an open-source reverse framework for Unix-based geeks, developed by Radare. Versions of radare2 prior to 6.1.4 contained a path traversal vulnerability. This vulnerability stemmed from path traversal during project deletion, allowing local attackers to recursively delete any directory ...

7.1CVSS5.8AI score0.00218EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/04/23 12:00 a.m.20 views

PT-2026-34751

radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recursively delete arbitrary directories by supplying absolute paths that escape the configured dir.projects root directory. Attackers can craft absolute paths to project marker files...

7.1CVSS5.9AI score0.00218EPSS
SaveExploits1References4
OSV
OSV
added 2026/03/06 3:29 a.m.14 views

CVE-2025-59541 Chamilo: CSRF Vulnerability in Project Deletion

Chamilo is a learning management system. Prior to version 1.11.34, a Cross-Site Request Forgery CSRF vulnerability allows an attacker to delete projects inside a course without the victim’s consent. The issue arises because sensitive actions such as project deletion do not implement anti-CSRF...

8.1CVSS5.7AI score
SaveExploits0References4
EUVD
EUVD
added 2026/03/06 3:29 a.m.12 views

EUVD-2025-208339

Chamilo is a learning management system. Prior to version 1.11.34, a Cross-Site Request Forgery CSRF vulnerability allows an attacker to delete projects inside a course without the victim’s consent. The issue arises because sensitive actions such as project deletion do not implement anti-CSRF...

8.1CVSS5.8AI score0.00151EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/03/06 3:29 a.m.7 views

CVE-2025-59541 Chamilo: CSRF Vulnerability in Project Deletion

Chamilo is a learning management system. Prior to version 1.11.34, a Cross-Site Request Forgery CSRF vulnerability allows an attacker to delete projects inside a course without the victim’s consent. The issue arises because sensitive actions such as project deletion do not implement anti-CSRF...

8.1CVSS5.7AI score0.00151EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/06 12:00 a.m.24 views

Chamilo 跨站请求伪造漏洞

Chamilo is an open-source learning management system developed by Chamilo. Versions of Chamilo prior to 1.11.34 contained a cross-site request forgery vulnerability. This vulnerability stemmed from the lack of anti-CSRF protection during sensitive operations such as project deletion, which could...

8.1CVSS5.7AI score0.00151EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 9:19 a.m.9 views

CVE-2021-22187

An issue has been discovered in GitLab affecting all versions of Gitlab EE/CE before 13.6.7. A potential resource exhaustion issue that allowed running or pending jobs to continue even after project was deleted...

4.3CVSS6.4AI score0.01038EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.14 views

EUVD-2021-26223

Malware in sbrugna...

5.5CVSS5.3AI score0.00983EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2017-16534

Malware in sbrugna...

3.5CVSS4.8AI score0.00478EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2020-22915

Malware in sbrugna...

5.3CVSS5.6AI score0.01209EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.15 views

EUVD-2025-3995

Malicious code in bioql PyPI...

8.8CVSS6.5AI score0.00614EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2021-9333

Malicious code in bioql PyPI...

4.3CVSS4.7AI score0.01038EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2023-52148

Malicious code in bioql PyPI...

4.3CVSS5.1AI score0.00247EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2024-32090

Malicious code in bioql PyPI...

8.1CVSS8.2AI score0.00494EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.5 views

EUVD-2024-17365

Malicious code in bioql PyPI...

7.5CVSS7.7AI score0.00436EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/05/23 4:14 a.m.13 views

CVE-2023-48063

An issue was discovered in dreamercms 4.1.3. There is a CSRF vulnerability that can delete a theme project via /admin/category/delete...

4.3CVSS6.9AI score0.00247EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/22 8:43 p.m.9 views

CVE-2021-39866

A business logic error in the project deletion process in GitLab 13.6 and later allows persistent access via project access tokens...

5.5CVSS6.1AI score0.00983EPSS
SaveExploits0References1
Rows per page
Query Builder