Lucene search
+L

1722 matches found

OSV
OSV
•added 2024/02/02 8:15 a.m.•17 views

CVE-2021-22281

: Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows Relative Path Traversal.This issue affects Automation Studio: from 4.0 through 4.12...

7.5CVSS5.8AI score0.00376EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/02 8:15 a.m.•36 views

CVE-2021-22281

: Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows Relative Path Traversal.This issue affects Automation Studio: from 4.0 through 4.12...

7.5CVSS6.6AI score0.00376EPSS
SaveExploits0References1
Prion
Prion
•added 2024/02/02 8:15 a.m.•28 views

Path traversal

: Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows Relative Path Traversal.This issue affects Automation Studio: from 4.0 through 4.12...

5CVSS7.2AI score0.00376EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/02/02 7:24 a.m.•44 views

CVE-2021-22281 Zip Slip Vulnerability in B&R Automation Studio Project Import

: Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows Relative Path Traversal.This issue affects Automation Studio: from 4.0 through 4.12...

6.3CVSS7.8AI score0.00376EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/02/02 7:24 a.m.•13 views

CVE-2021-22281 Zip Slip Vulnerability in B&R Automation Studio Project Import

: Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows Relative Path Traversal.This issue affects Automation Studio: from 4.0 through 4.12...

6.3CVSS6.9AI score0.00376EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/02 12:00 a.m.•2 views

CVE-2021-22281: Relative Path Traversal

: Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows Relative Path Traversal.This issue affects Automation Studio: from 4.0 through 4.12...

7.5CVSS5.8AI score0.00376EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/02/02 12:00 a.m.•17 views

B&R Industrial Automation Studio Path Traversal Vulnerability

B&R Industrial Automation Studio is a suite of integrated development environments IDEs from B&R Industrial Automation, an Austrian company that develops and programs its automation solutions. A security vulnerability exists in B&R Industrial Automation Studio versions 4.0 through 4.12 that stems...

7.5CVSS6.8AI score0.00376EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/02 12:00 a.m.•25 views

PT-2024-10876

Name of the Vulnerable Software and Affected Versions B&R Industrial Automation Automation Studio versions 4.0 through 4.12 Description The issue is related to a Relative Path Traversal vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations F...

7.5CVSS7.3AI score0.00376EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/01 12:00 a.m.•0 views

CVE-2024-22096: Relative Path Traversal

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can append path traversal characters to the filename when using a specific command, allowing them to read arbitrary files from the system...

6.5CVSS5.8AI score0.00589EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/02/01 12:00 a.m.•20 views

The vulnerability of Websoft HCM’s automation software for HR processes lies in its ability to bypass a relative path, allowing attackers to perform arbitrary file operations outside of the directory.

The vulnerability of Websoft HCM’s automation software for HR processes involves exploiting a relative path. Exploiting this vulnerability allows an attacker to perform arbitrary file operations outside the directory...

8.4CVSS5.6AI score
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/01/23 10:15 a.m.•15 views

CVE-2024-23182

Relative path traversal vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote authenticate...

8.1CVSS6.9AI score0.00749EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/23 12:00 a.m.•2 views

CVE-2024-23182: Improper Limitation of a Pathname to a Restricted Directory

Relative path traversal vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote authenticate...

8.1CVSS7AI score0.00749EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/01/22 12:00 a.m.•16 views

a-blog cms security breach

a-blog cms is a Japanese content management system CMS. A security vulnerability exists in a-blog cms, which stems from a relative path traversal vulnerability that could allow an attacker to delete arbitrary files on the server...

8.1CVSS6.8AI score0.00749EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/01/22 12:00 a.m.•81 views

JVN#34565930: Multiple vulnerabilities in a-blog cms

a-blog cms provided by appleple inc. contains multiple vulnerabilities listed below. Improper input validation CWE-20 - CVE-2024-23180 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N| Base Score: 3.5 CVSS v2| AV:N/AC:M/Au:S/C:N/I:P/A:N| Base Score: 3.5...

8.8CVSS7.2AI score0.00918EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/18 12:00 a.m.•1 views

CVE-2024-22415: Relative Path Traversal

jupyter-lsp is a coding assistance tool for JupyterLab code navigation + hover suggestions + linters + autocompletion + rename using Language Server Protocol. Installations of jupyter-lsp running in environments without configured file system access control on the operating system level, and with...

9.8CVSS7.9AI score0.00491EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2024/01/17 12:00 a.m.•17 views

The software for deploying and executing AI models, NVIDIA Triton Inference Server (previously TensorRT Inference Server), has vulnerabilities that allow attackers to gain unauthorized access to protected information, enhance their privileges, execute arbitrary code, or cause service failures.

The vulnerability of the NVIDIA Triton Inference Server previously known as TensorRT Inference Server software for deploying and executing artificial intelligence models is related to errors in processing the relative path to the catalog during model loading. Exploiting this vulnerability can all...

7.5CVSS7.9AI score0.00853EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/12 5:11 p.m.•5 views

CVE-2023-31036 CVE

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where, when it is launched with the non-default command line option --model-control explicit, an attacker may use the model load API to cause a relative path traversal. A successful exploit of this vulnerability may lea...

7.5CVSS7.6AI score0.00853EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/12 12:00 a.m.•2 views

CVE-2023-31036: Relative Path Traversal

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where, when it is launched with the non-default command line option --model-control explicit, an attacker may use the model load API to cause a relative path traversal. A successful exploit of this vulnerability may lea...

8.8CVSS7.4AI score0.00853EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2023/12/30 9:37 p.m.•473 views

Exploit for Files or Directories Accessible to External Parties in Apache Struts

This is a Proof of Concept PoC for CVE-2023-50164https://nv...

9.8CVSS8.2AI score0.80819EPSS
SaveExploits15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/27 12:00 a.m.•1 views

CVE-2023-50255: Relative Path Traversal

Deepin-Compressor is the default archive manager of Deepin Linux OS. Prior to 5.12.21, there's a path traversal vulnerability in deepin-compressor that can be exploited to achieve Remote Command Execution on the target system upon opening crafted archives. Users are advised to update to version...

9.3CVSS7.2AI score0.01054EPSS
SaveExploits1References4
Rows per page
Query Builder