Lucene search
+L

1202 matches found

Positive Technologies
Positive Technologies
added 2023/11/08 12:0 a.m.20 views

PT-2023-9113 · Telit · Telit Cinterion Pls62 +3

Name of the Vulnerable Software and Affected Versions: Telit Cinterion BGS5 Telit Cinterion EHS5/6/8 Telit Cinterion PDS5/6/8 Telit Cinterion ELS61/81 Telit Cinterion PLS62 Description: A Relative Path Traversal issue exists that could allow a local, low privileged attacker to escape from virtual...

7.1CVSS6.9AI score0.00236EPSS
SaveExploits0References5
Snyk
Snyk
added 2023/11/07 7:37 p.m.5 views

Relative Path Traversal

Overview std/path/filepath is a Go standard library package std/path/filepath Affected versions of this package are vulnerable to Relative Path Traversal. Go Vulnerability Report:The filepath package does not recognize paths with a ??\ prefix as special.On Windows, a path beginning with ??\ is a...

8.7CVSS7.3AI score0.02758EPSS
SaveExploits0References2
Snyk
Snyk
added 2023/11/07 7:37 p.m.4 views

Relative Path Traversal

Overview std/internal/safefilepath is a Go standard library package std/internal/safefilepath Affected versions of this package are vulnerable to Relative Path Traversal. Go Vulnerability Report:The filepath package does not recognize paths with a ??\ prefix as special.On Windows, a path beginnin...

8.7CVSS7.3AI score0.02758EPSS
SaveExploits0References2
NCSC
NCSC
added 2023/10/13 12:0 a.m.9 views

Vulnerability fixed in FortiManager and FortiAnalyzer

FortiNet has fixed a vulnerability in FortiManager and FortiAnalyzer. The vulnerability involves a "relative path traversal" vulnerability in FortiManager and FortiAnalyzer and could allow a remote malicious party to execute unauthorized code. execute. FortiNet has released updates to fix the...

8.8CVSS7AI score0.04184EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2023/10/11 12:0 a.m.14 views

PT-2025-14468 · Fortinet · Fortisiem

Name of the Vulnerable Software and Affected Versions: Fortinet FortiSIEM versions 6.5.0 through 6.5.1, 6.6.0 through 6.6.3, 6.7.0 through 6.7.2, 7.0.0 Description: A relative path traversal issue allows an attacker to escalate privileges via uploading certain GUI elements. This issue can be...

9.9CVSS6.8AI score0.00583EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2023/10/10 12:0 a.m.8 views

PT-2023-8719 · Fortinet · Fortimanager

Name of the Vulnerable Software and Affected Versions: Fortinet FortiManager versions 6.2.0 through 6.2.11 Fortinet FortiManager versions 6.4.0 through 6.4.12 Fortinet FortiManager versions 7.0.0 through 7.0.8 Fortinet FortiManager versions 7.2.0 through 7.2.3 Fortinet FortiManager version 7.4.0...

10CVSS8AI score0.04184EPSS
SaveExploits1References8
OSV
OSV
added 2023/10/04 11:15 a.m.6 views

CVE-2023-3512

Relative path traversal vulnerability in Setelsa Security's ConacWin CB, in its 3.8.2.2 version and earlier, the exploitation of which could allow an attacker to perform an arbitrary download of files from the system via the "Download file" parameter...

7.5CVSS5.9AI score0.00577EPSS
SaveExploits0References2
NVD
NVD
added 2023/10/04 11:15 a.m.33 views

CVE-2023-3701

Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated non privileged user could access/modify stored resources of other users. It could also be possible to access and modify the source and configuration files o...

9.9CVSS9.2AI score0.00629EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/04 11:15 a.m.25 views

Path traversal

Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated non privileged user could access/modify stored resources of other users. It could also be possible to access and modify the source and configuration files o...

6.5CVSS8.3AI score0.00629EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/10/04 10:56 a.m.25 views

CVE-2023-3701 Relative path traversal in Aqua eSolutions

Aqua Drive, in its 2.4 version, is vulnerable to a relative path traversal vulnerability. By exploiting this vulnerability, an authenticated non privileged user could access/modify stored resources of other users. It could also be possible to access and modify the source and configuration files o...

9.9CVSS9.3AI score0.00629EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/04 10:56 a.m.64 views

CVE-2023-3701

The CVE-2023-3701 entry concerns Aqua Drive version 2.4, which is reported to be vulnerable to a relative path traversal. The vulnerability allows an authenticated non-privileged user to access or modify stored resources belonging to other users and could enable access or modification of source a...

9.9CVSS8.8AI score0.00629EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/04 10:53 a.m.12 views

CVE-2023-3512 Relative path traversal in Setelsa Security ConacWin CB

Relative path traversal vulnerability in Setelsa Security's ConacWin CB, in its 3.8.2.2 version and earlier, the exploitation of which could allow an attacker to perform an arbitrary download of files from the system via the "Download file" parameter...

7.5CVSS7.2AI score0.00577EPSS
SaveExploits0References1
NVD
NVD
added 2023/09/27 3:19 p.m.26 views

CVE-2023-43825

Relative path traversal vulnerability in Shihonkanri Plus Ver9.0.3 and earlier allows a local attacker to execute an arbitrary code by having a legitimate user import a specially crafted backup file of the product...

7.8CVSS7.7AI score0.00318EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/27 3:19 p.m.5 views

CVE-2023-43825

Relative path traversal vulnerability in Shihonkanri Plus Ver9.0.3 and earlier allows a local attacker to execute an arbitrary code by having a legitimate user import a specially crafted backup file of the product...

7.8CVSS6AI score0.00318EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/09/27 12:0 a.m.9 views

PT-2023-29002 · Unknown · Shihonkanri Plus

Name of the Vulnerable Software and Affected Versions: Shihonkanri Plus versions prior to 9.0.3 Description: A relative path traversal issue allows a local attacker to execute arbitrary code by having a legitimate user import a specially crafted backup file of the product. Recommendations: For...

7.8CVSS7.8AI score0.00318EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/09/27 12:0 a.m.41 views

JVN#17434995: Shihonkanri Plus vulnerable to relative path traversal

Shihonkanri Plus provided by EKAKIN contains a relative path traversal vulnerability CWE-23. Impact An attacker may execute arbitrary code by having a legitimate user import a specially crafted backup file of the product. Solution Update the software Update the software to the latest version...

7.8CVSS7.8AI score0.00318EPSS
SaveExploits0
NVD
NVD
added 2023/09/21 6:15 a.m.20 views

CVE-2015-5467

web\ViewAction in Yii aka Yii2 2.x before 2.0.5 allows attackers to execute any local .php file via a relative path in the view parameeter...

9.8CVSS9.2AI score0.0074EPSS
SaveExploits0References2
Veracode
Veracode
added 2023/09/18 7:30 a.m.27 views

Path Traversal

cecil/cecil vulnerable to Relative Path Traversal. The vulnerability is caused by a lack of additional checks when verifying a file is within an expected location, which can lead to the access of files outside of the document root...

7.5CVSS6.8AI score0.00731EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/09/14 3:15 p.m.5 views

CVE-2021-28485

In Ericsson Mobile Switching Center Server MSC-S before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application...

4.3CVSS5AI score0.00548EPSS
SaveExploits0References3
CVE
CVE
added 2023/09/14 12:0 a.m.49 views

CVE-2021-28485

CVE-2021-28485 affects Ericsson MSC-S (Mobile Switching Center Server) via the SIS web application. The issue is a relative path traversal in an authenticated context, triggered by a specific parameter in HTTPS requests, enabling access to system files not intended for web access. Documented affe...

4.3CVSS4.6AI score0.00548EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder