Lucene search
+L

818 matches found

Snyk
Snyk
added 2023/11/07 7:37 p.m.5 views

Relative Path Traversal

Overview std/path/filepath is a Go standard library package std/path/filepath Affected versions of this package are vulnerable to Relative Path Traversal. Go Vulnerability Report:The filepath package does not recognize paths with a ??\ prefix as special.On Windows, a path beginning with ??\ is a...

8.7CVSS7.3AI score0.02758EPSS
SaveExploits0References2
NCSC
NCSC
added 2023/10/13 12:0 a.m.6 views

Vulnerability fixed in FortiManager and FortiAnalyzer

FortiNet has fixed a vulnerability in FortiManager and FortiAnalyzer. The vulnerability involves a "relative path traversal" vulnerability in FortiManager and FortiAnalyzer and could allow a remote malicious party to execute unauthorized code. execute. FortiNet has released updates to fix the...

8.8CVSS7AI score0.04184EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2023/10/11 12:0 a.m.10 views

PT-2025-14468 · Fortinet · Fortisiem

Name of the Vulnerable Software and Affected Versions: Fortinet FortiSIEM versions 6.5.0 through 6.5.1, 6.6.0 through 6.6.3, 6.7.0 through 6.7.2, 7.0.0 Description: A relative path traversal issue allows an attacker to escalate privileges via uploading certain GUI elements. This issue can be...

9.9CVSS6.8AI score0.00569EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2023/10/10 12:0 a.m.4 views

PT-2023-8719 · Fortinet · Fortimanager

Name of the Vulnerable Software and Affected Versions: Fortinet FortiManager versions 6.2.0 through 6.2.11 Fortinet FortiManager versions 6.4.0 through 6.4.12 Fortinet FortiManager versions 7.0.0 through 7.0.8 Fortinet FortiManager versions 7.2.0 through 7.2.3 Fortinet FortiManager version 7.4.0...

10CVSS8AI score0.04184EPSS
SaveExploits1References8
NVD
NVD
added 2023/10/04 11:15 a.m.30 views

CVE-2023-3701

Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated non privileged user could access/modify stored resources of other users. It could also be possible to access and modify the source and configuration files o...

9.9CVSS9.2AI score0.00629EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/04 11:15 a.m.3 views

CVE-2023-3512

Relative path traversal vulnerability in Setelsa Security's ConacWin CB, in its 3.8.2.2 version and earlier, the exploitation of which could allow an attacker to perform an arbitrary download of files from the system via the "Download file" parameter...

7.5CVSS5.9AI score0.00577EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/10/04 10:56 a.m.22 views

CVE-2023-3701 Relative path traversal in Aqua eSolutions

Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated non privileged user could access/modify stored resources of other users. It could also be possible to access and modify the source and configuration files o...

9.9CVSS9.3AI score0.00629EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/04 10:56 a.m.53 views

CVE-2023-3701

The CVE-2023-3701 entry concerns Aqua Drive version 2.4, which is reported to be vulnerable to a relative path traversal. The vulnerability allows an authenticated non-privileged user to access or modify stored resources belonging to other users and could enable access or modification of source a...

9.9CVSS8.8AI score0.00629EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/04 10:53 a.m.11 views

CVE-2023-3512 Relative path traversal in Setelsa Security ConacWin CB

Relative path traversal vulnerability in Setelsa Security's ConacWin CB, in its 3.8.2.2 version and earlier, the exploitation of which could allow an attacker to perform an arbitrary download of files from the system via the "Download file" parameter...

7.5CVSS7.2AI score0.00577EPSS
SaveExploits0References1
NVD
NVD
added 2023/09/27 3:19 p.m.25 views

CVE-2023-43825

Relative path traversal vulnerability in Shihonkanri Plus Ver9.0.3 and earlier allows a local attacker to execute an arbitrary code by having a legitimate user import a specially crafted backup file of the product...

7.8CVSS7.7AI score0.00318EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/27 3:19 p.m.3 views

CVE-2023-43825

Relative path traversal vulnerability in Shihonkanri Plus Ver9.0.3 and earlier allows a local attacker to execute an arbitrary code by having a legitimate user import a specially crafted backup file of the product...

7.8CVSS6AI score0.00318EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/09/27 12:0 a.m.7 views

PT-2023-29002 · Unknown · Shihonkanri Plus

Name of the Vulnerable Software and Affected Versions: Shihonkanri Plus versions prior to 9.0.3 Description: A relative path traversal issue allows a local attacker to execute arbitrary code by having a legitimate user import a specially crafted backup file of the product. Recommendations: For...

7.8CVSS7.8AI score0.00318EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/09/27 12:0 a.m.40 views

JVN#17434995: Shihonkanri Plus vulnerable to relative path traversal

Shihonkanri Plus provided by EKAKIN contains a relative path traversal vulnerability CWE-23. Impact An attacker may execute arbitrary code by having a legitimate user import a specially crafted backup file of the product. Solution Update the software Update the software to the latest version...

7.8CVSS7.8AI score0.00318EPSS
SaveExploits0
Veracode
Veracode
added 2023/09/18 7:30 a.m.24 views

Path Traversal

cecil/cecil vulnerable to Relative Path Traversal. The vulnerability is caused by a lack of additional checks when verifying a file is within an expected location, which can lead to the access of files outside of the document root...

7.5CVSS6.8AI score0.00731EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/09/14 3:15 p.m.3 views

CVE-2021-28485

In Ericsson Mobile Switching Center Server MSC-S before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application...

4.3CVSS5AI score0.00548EPSS
SaveExploits0References3
CVE
CVE
added 2023/09/14 12:0 a.m.44 views

CVE-2021-28485

CVE-2021-28485 affects Ericsson MSC-S (Mobile Switching Center Server) via the SIS web application. The issue is a relative path traversal in an authenticated context, triggered by a specific parameter in HTTPS requests, enabling access to system files not intended for web access. Documented affe...

4.3CVSS4.6AI score0.00548EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/09/12 3:15 p.m.32 views

CVE-2023-4914

Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...

7.5CVSS6.2AI score0.00731EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/09/12 2:11 p.m.33 views

CVE-2023-4914 Relative Path Traversal in cecilapp/cecil

Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...

5.8CVSS7.7AI score0.00731EPSS
SaveExploits1References2
CVE
CVE
added 2023/09/12 2:11 p.m.152 views

CVE-2023-4914

CVE-2023-4914 is a Relative Path Traversal vulnerability in the Cecil project (cecilapp/cecil) prior to version 7.47.1. The initial and connected sources consistently describe the issue as path traversal, but do not provide explicit root-cause details in these documents. Affected software/version...

7.5CVSS6.4AI score0.00731EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/09/12 2:11 p.m.27 views

CVE-2023-4914 Relative Path Traversal in cecilapp/cecil

Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...

5.8CVSS6AI score0.00731EPSS
SaveExploits1References4
Rows per page
Query Builder