Lucene search
+L

1725 matches found

RedhatCVE
RedhatCVE
•added 2025/02/05 6:47 a.m.•14 views

CVE-2024-50453

Relative Path Traversal vulnerability in webangon The Pack Elementor addons the-pack-addon allows PHP Local File Inclusion.This issue affects The Pack Elementor addons: from n/a through = 2.0.9...

8.8CVSS5.9AI score0.00557EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 6:10 a.m.•16 views

CVE-2024-49253

Relative Path Traversal vulnerability in JamesPark.ninja Analyse Uploads analyse-uploads allows Relative Path Traversal.This issue affects Analyse Uploads: from n/a through = 0.5...

8.6CVSS5.9AI score0.00589EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 2:22 a.m.•21 views

CVE-2024-24869

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in BoldGrid Total Upkeep allows Relative Path Traversal.This issue affects Total Upkeep: from n/a through 1.15.8...

7.5CVSS6.8AI score0.00658EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/04 11:04 p.m.•17 views

CVE-2024-0549

mintplex-labs/anything-llm is vulnerable to a relative path traversal attack, allowing unauthorized attackers with a default role account to delete files and folders within the filesystem, including critical database files such as 'anythingllm.db'. The vulnerability stems from insufficient input...

8.1CVSS8AI score0.00819EPSS
SaveExploits1References1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/02/04 8:53 p.m.•52 views

Security Bulletin: Multiple vulnerabilities in Go affect IBM Robotic Process Automation for Cloud Pak

Summary Multiple vulnerabilities in Go affect IBM Robotic Process Automation for Cloud Pak. This bulletin identifies fixes required to resolve the vulnerabilities. Vulnerability Details CVEID:CVE-2023-39325 DESCRIPTION: Golang Go is vulnerable to a denial of service, caused by an uncontrolled...

8.3CVSS7.2AI score0.99999EPSS
SaveExploits22Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/02/03 12:00 a.m.•17 views

The vulnerability of the web interface of the Cacti network monitoring software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the web interface of the Cacti network monitoring software is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

8CVSS8.2AI score0.03052EPSS
SaveExploits1References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/02/03 12:00 a.m.•13 views

The vulnerability of the software for centralized device management in Fortinet’s FortiManager system lies in errors in processing the relative path to the directory. This allows a malicious user to delete any files from the file system.

The vulnerability of the software for centralized device management in Fortinet’s FortiManager lies in errors in processing the relative path to the directory. Exploiting this vulnerability allows a malicious actor to delete arbitrary files from the file system by sending specially crafted reques...

7.5CVSS5.5AI score0.01062EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2025/01/30 10:03 a.m.•24 views

Relative Path Traversal

org.apache.solr, solr-core is vulnerable to Relative Path Traversal. The vulnerability is due to a lack of input sanitization in the "configset upload" API, which allows the arbitrary filepath write-access when processing ZIP files...

5.4CVSS6.7AI score0.44993EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2025/01/29 7:20 a.m.•31 views

BIT-SOLR-2024-52012 Apache Solr: Configset upload on Windows allows arbitrary path write-access

Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the "configset upload" API. Commonly known as a "zipslip", maliciously constructed ZIP files can use relative filepaths t...

5.4CVSS5.9AI score0.44993EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/29 12:00 a.m.•1 views

CVE-2024-54462: Relative Path Traversal

The file names constructed within imagepicker are missing sanitization checks leaving them vulnerable to malicious document providers. This may result in cases where a user with a malicious document provider installed can select an image file from that provider while using your app and could...

7.1CVSS5.8AI score0.00202EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/29 12:00 a.m.•0 views

CVE-2024-54461: Relative Path Traversal

The file names constructed within fileselector are missing sanitization checks leaving them vulnerable to malicious document providers. This may result in cases where a user with a malicious document provider installed can select a document file from that provider while using your app and could...

7.1CVSS5.8AI score0.00202EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/28 5:15 a.m.•8 views

ALPINE-CVE-2025-23084

A vulnerability has been identified in Node.js, specifically affecting the handling of drive names in the Windows environment. Certain Node.js functions do not treat drive names as special on Windows. As a result, although Node.js assumes a relative path, it actually refers to the root directory...

5.5CVSS6.8AI score0.01585EPSS
SaveExploits1References1
Veracode
Veracode
•added 2025/01/27 10:25 a.m.•17 views

Relative Path Traversal

github.com/hashicorp/go-slug is vulnerable to Relative Path Traversal. The vulnerability is due to improper path validation when extracting user-provided paths from tar entries, allowing for directory traversal and potential overwriting of arbitrary files...

9.1CVSS6.8AI score0.00692EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
•added 2025/01/27 9:30 a.m.•34 views

Apache Solr Relative Path Traversal vulnerability

Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the "configset upload" API. Commonly known as a "zipslip", maliciously constructed ZIP files can use relative filepaths t...

5.4CVSS7AI score0.44993EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2025/01/27 9:15 a.m.•40 views

CVE-2024-52012

Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the "configset upload" API. Commonly known as a "zipslip", maliciously constructed ZIP files can use relative filepaths t...

5.4CVSS0.44993EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/01/27 8:54 a.m.•16 views

CVE-2024-52012 Apache Solr: Configset upload on Windows allows arbitrary path write-access

Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the "configset upload" API. Commonly known as a "zipslip", maliciously constructed ZIP files can use relative filepaths t...

5.7AI score0.44993EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/27 8:54 a.m.•15 views

CVE-2024-52012 Apache Solr: Configset upload on Windows allows arbitrary path write-access

Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the "configset upload" API. Commonly known as a "zipslip", maliciously constructed ZIP files can use relative filepaths t...

5.4CVSS7.2AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2025/01/27 8:54 a.m.•33 views

CVE-2024-52012 Apache Solr: Configset upload on Windows allows arbitrary path write-access

Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the "configset upload" API. Commonly known as a "zipslip", maliciously constructed ZIP files can use relative filepaths t...

0.44993EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/27 8:54 a.m.•184 views

CVE-2024-52012

Apache Solr instances running on Windows are vulnerable to a Relative Path Traversal (zipslip) vulnerability in the "configset upload" API . Due to a lack of input-sanitation, an attacker can use maliciously constructed ZIP files with relative filepaths to gain arbitrary filepath write-access to ...

5.4CVSS9.6AI score0.44993EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/27 12:00 a.m.•1 views

CVE-2024-52012: Relative Path Traversal

Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to arbitrary filepath write-access, due to a lack of input-sanitation in the "configset upload" API. Commonly known as a "zipslip", maliciously constructed ZIP files can use relative filepaths t...

5.4CVSS8.2AI score0.44993EPSS
SaveExploits0References1
Rows per page
Query Builder