Lucene search
+L

1623 matches found

NVD
NVD
added 2012/04/13 10:41 a.m.20 views

CVE-2011-4880

Directory traversal vulnerability in the web server in Certec atvise webMI2ADS aka webMI before 2.0.2 allows remote attackers to read arbitrary files via a crafted HTTP request...

5CVSS6.6AI score0.05534EPSS
SaveExploits1References1
zdt
zdt
added 2012/04/08 12:0 a.m.28 views

Distinct TFTP Server <= 3.01 Directory Traversal Vulnerability

Exploit for windows platform in category remote exploits Exploit Title: Distinct TFTP Server = 3.01 Directory Traversal Vulnerability Date: April 8, 2012 Software Link: http://www.distinct.com/index.php/downloads/index/p=ISERV Affected Versions: 3.01 and previous version may also affected Tested...

7.1AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2011/11/21 9:22 a.m.3 views

Nikki vulnerable to directory traversal

Overview Nikki from HP no Mawashimono contains a directory traversal vulnerability. Nikki from HP no Mawashimono is CGI software for posting diary entries. Nikki contains a directory traversal vulnerability. Masako Ohno reported this vulnerability to IPA. JPCERT/CC coordinated with the developer...

7.5CVSS6.8AI score0.01519EPSS
SaveExploits0References5
CVE
CVE
added 2011/07/17 8:0 p.m.53 views

CVE-2011-2757

CVE-2011-2757 affects ManageEngine ServiceDesk Plus

5CVSS6.8AI score0.39366EPSS
SaveExploits4References1Affected Software1
OpenVAS
OpenVAS
added 2011/07/14 12:0 a.m.21 views

Avaya IP Office Manager TFTP Server 8.1 Directory Traversal Vulnerability - Active Check

Avaya IP Office Manager TFTP Server is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

5.8AI score
SaveExploits0References6
OSV
OSV
added 2011/06/30 3:55 p.m.5 views

DEBIAN-CVE-2009-5078

contrib/pdfmark/pdfroff.sh in GNU troff aka groff before 1.21 launches the Ghostscript program without the -dSAFER option, which allows remote attackers to create, overwrite, rename, or delete arbitrary files via a crafted document...

6.5CVSS7AI score0.02305EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2011/06/30 3:55 p.m.4 views

CVE-2009-5078

contrib/pdfmark/pdfroff.sh in GNU troff aka groff before 1.21 launches the Ghostscript program without the -dSAFER option, which allows remote attackers to create, overwrite, rename, or delete arbitrary files via a crafted document...

6.5CVSS5.8AI score0.02305EPSS
SaveExploits0References7
OSV
OSV
added 2011/05/24 11:55 p.m.3 views

DEBIAN-CVE-2011-1595

Directory traversal vulnerability in the diskcreate function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. dot dot in a pathname...

4.3CVSS6.6AI score0.01094EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2011/05/11 10:6 p.m.8 views

rdesktop remote file access

Directory traversal vulnerability in the diskcreate function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. dot dot in a pathname...

4.3CVSS5.9AI score0.01094EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2011/02/15 12:0 a.m.20 views

Drupal AES Encryption Module Information Disclosure Vulnerability (SA-CONTRIB-2011-005) - Active Check

Drupal AES Encryption Module is prone to an information disclosure vulnerability. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

5CVSS6.6AI score0.00904EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2011/02/14 9:0 p.m.35 views

CVE-2011-0698

Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / slash character in a key in a session cookie, related to session replays...

7.5CVSS6AI score0.02856EPSS
SaveExploits0References2
CVE
CVE
added 2011/02/14 8:0 p.m.123 views

CVE-2011-0698

CVE-2011-0698 affects Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows, where a session cookie key containing a slash could allow directory traversal to read/execute files via session replays. The issue is triggered by a specific character in a session cookie and is documented across m...

7.5CVSS6.7AI score0.02856EPSS
SaveExploits0References7Affected Software1
Prion
Prion
added 2010/12/23 6:0 p.m.19 views

Directory traversal

Directory traversal vulnerability in Ecava IntegraXor 3.6.4000.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in an open request...

5CVSS7.1AI score0.26482EPSS
SaveExploits2References8Affected Software1
OpenVAS
OpenVAS
added 2010/12/09 12:0 a.m.18 views

WinTFTP Server Pro 3.1 Remote Directory Traversal Vulnerability - Active Check

WinTFTP Server is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.8AI score
SaveExploits0References5
Prion
Prion
added 2010/10/08 9:0 p.m.16 views

Directory traversal

Directory traversal vulnerability in Visual Synapse HTTP Server 1.0 RC1 through RC3, and 0.60 and earlier, allows remote attackers to read arbitrary files via a .. dot dot in the URI...

5CVSS7AI score0.02482EPSS
SaveExploits3References4Affected Software1
CVE
CVE
added 2010/10/08 8:0 p.m.52 views

CVE-2010-3743

Summary: CVE-2010-3743 affects Visual Synapse HTTP Server. The vulnerability is a directory traversal flaw that lets remote attackers read arbitrary files by crafting a URI containing dot-dot sequences. Affected products/versions (as stated): Visual Synapse HTTP Server 1.0 RC1 through RC3, and 0....

5CVSS6.6AI score0.02482EPSS
SaveExploits3References4Affected Software1
OSV
OSV
added 2010/09/24 7:0 p.m.4 views

DEBIAN-CVE-2010-3306

Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3 allows remote attackers to read arbitrary files via ..%2f sequences in a URI...

5CVSS6.8AI score0.08559EPSS
SaveExploits2References1
CVE
CVE
added 2010/09/24 6:0 p.m.46 views

CVE-2010-3306

Vulnerability summary (CVE-2010-3306) : A directory traversal flaw exists in the Weborf project, in the modURL function of instance.c, affecting versions prior to 0.12.3. An attacker can read arbitrary files by crafting a URI containing ..%2f sequences. This is a remote, unauthenticated issue tha...

5CVSS6.9AI score0.08559EPSS
SaveExploits2References7Affected Software1
Vulnrichment
Vulnrichment
added 2010/08/11 6:0 p.m.6 views

CVE-2010-2861

Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to 1 CFIDE/administrator/settings/mappings.cfm, 2 logging/settings.cfm, 3 datasources/index.cfm, 4...

9.6AI score0.99721EPSS
SaveExploits13References5
d2
d2
added 2010/06/22 8:30 p.m.105 views

DSquare Exploit Pack: D2SEC_AXIS

Name| d2secaxis ---|--- CVE| CVE-2010-1632 Exploit Pack| D2ExploitPack Description| Apache Axis2 Remote File Access Notes|...

7.5CVSS2.4AI score0.22372EPSS
SaveExploits3
Rows per page
Query Builder