Lucene search
+L

21900 matches found

NVD
NVD
•added 2022/09/05 4:15 p.m.•42 views

CVE-2022-39838

Systematic FIX Adapter ALFAFX 2.4.0.25 13/09/2017 allows remote file inclusion via a UNC share pathname, and also allows absolute path traversal to local pathnames...

8.6CVSS0.01946EPSS
SaveExploits2References3
osv_cve
osv_cve
•added 2022/09/05 4:15 p.m.•21 views

CVE-2022-39838

Systematic FIX Adapter ALFAFX 2.4.0.25 13/09/2017 allows remote file inclusion via a UNC share pathname, and also allows absolute path traversal to local pathnames...

8.6CVSS5.8AI score0.01946EPSS
SaveExploits2References3
Prion
Prion
•added 2022/09/05 4:15 p.m.•29 views

Path traversal

Systematic FIX Adapter ALFAFX 2.4.0.25 13/09/2017 allows remote file inclusion via a UNC share pathname, and also allows absolute path traversal to local pathnames...

5CVSS8.3AI score0.01946EPSS
SaveExploits2References3Affected Software1
CVE
CVE
•added 2022/09/05 3:39 p.m.•74 views

CVE-2022-39838

CVE-2022-39838 affects Systematic FIX Adapter (ALFAFX) 2.4.0.25 (build 13/09/2017). It allows remote file inclusion via UNC share pathnames and absolute path traversal to local pathnames. Impact is exposure/disclosure via remote access; exploitability is network-based with no user interaction req...

8.6CVSS8.2AI score0.01946EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
•added 2022/09/05 3:39 p.m.•59 views

CVE-2022-39838

Systematic FIX Adapter ALFAFX 2.4.0.25 13/09/2017 allows remote file inclusion via a UNC share pathname, and also allows absolute path traversal to local pathnames...

8.5AI score0.01946EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2022/09/05 12:00 a.m.•22 views

Systematic Alpha Management FIX Adapter path traversal vulnerability

Systematic Alpha Management FIX Adapter is an adapter from Systematic Alpha Management, USA. A security vulnerability exists in Systematic Alpha Management FIX Adapter ALFAFX version 2.4.0.25 13/09/2017, which stems from a vulnerability that allows remote files to be included via UNC shared...

8.6CVSS7.9AI score0.01946EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
•added 2022/09/05 12:00 a.m.•15 views

PT-2022-25028 · Unknown · Systematic Fix Adapter

Name of the Vulnerable Software and Affected Versions: Systematic FIX Adapter ALFAFX version 2.4.0.25 Description: The issue allows remote file inclusion via a UNC share pathname and also enables absolute path traversal to local pathnames. Recommendations: For version 2.4.0.25, consider restricti...

8.6CVSS8.2AI score0.01946EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/05 12:00 a.m.•10 views

CVE-2022-39838: Improper Limitation of a Pathname to a Restricted Directory

Systematic FIX Adapter ALFAFX 2.4.0.25 13/09/2017 allows remote file inclusion via a UNC share pathname, and also allows absolute path traversal to local pathnames...

8.6CVSS7.9AI score0.01946EPSS
SaveExploits2References2
Prion
Prion
•added 2022/08/08 2:15 p.m.•30 views

Remote file inclusion

The WSM Downloader WordPress plugin through 1.4.0 allows any visitor to use its remote file download feature to download any local files, including sensitive ones like wp-config.php...

5CVSS7.5AI score0.0146EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2022/06/09 12:15 a.m.•32 views

Remote file inclusion

A local file inclusion vulnerability in Razer Sila Gaming Router v2.0.441api-2.0.418 allows attackers to read arbitrary files...

5CVSS7.3AI score0.11816EPSS
SaveExploits3References3Affected Software1
osv_ghsa
osv_ghsa
•added 2022/05/17 5:29 a.m.•31 views

GHSA-48R9-4V93-X4WH DOMPDF Remote File Inclusion Vulnerability

PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the inputfile parameter...

7.5CVSS8.8AI score0.05227EPSS
SaveExploits2References7
Github Security Blog
Github Security Blog
•added 2022/05/17 5:29 a.m.•34 views

DOMPDF Remote File Inclusion Vulnerability

PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the inputfile parameter...

7.5CVSS7.8AI score0.05227EPSS
SaveExploits2References7Affected Software1
osv_ghsa
osv_ghsa
•added 2022/05/02 6:19 a.m.•22 views

GHSA-4H9J-F98M-P4HG TYPO3 PHP remote file inclusion vulnerability

PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows remote attackers to execute arbitrary PHP code via a URL in an input field associated with the className variable...

9.3CVSS7.7AI score0.01155EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2022/05/02 6:19 a.m.•38 views

TYPO3 PHP remote file inclusion vulnerability

PHP remote file inclusion vulnerability in the autoloader in TYPO3 4.3.x before 4.3.3 allows remote attackers to execute arbitrary PHP code via a URL in an input field associated with the className variable...

6.8CVSS7.8AI score0.01155EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
•added 2022/05/01 7:19 a.m.•21 views

EUVD-2006-4519

PHP remote file inclusion vulnerability in lib/config.php in Pheap CMS 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter...

7.5CVSS7.4AI score0.04328EPSS
SaveExploits2References10
EUVD
EUVD
•added 2022/05/01 7:16 a.m.•17 views

EUVD-2006-4199

PHP remote file inclusion vulnerability in install3.php in WEBInsta Mailing List Manager 1.3e allows remote attackers to execute arbitrary PHP code via a URL in the cabsolutepath parameter...

7.5CVSS7.5AI score0.03454EPSS
SaveExploits1References8
attackerkb
attackerkb
•added 2022/04/15 6:15 p.m.•11 views

CVE-2022-27257

A PHP Local File Inclusion vulneraility in the default Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arbitrary php files via the schema parameter...

7.5CVSS6AI score0.01285EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/04/13 12:00 a.m.•18 views

Hubzilla has a vulnerability related to input validation.

Hubzilla is a powerful open source platform for creating interconnected websites with a decentralized identity, communication and permissions framework built using common web server technologies. A security vulnerability exists in Hubzilla versions prior to 7.2, which stems from a PHP local file...

6.1CVSS6.5AI score0.01488EPSS
SaveExploits1References4
Prion
Prion
•added 2022/02/24 7:15 p.m.•32 views

Remote file inclusion

A local file inclusion in Hospital Patient Record Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

6.8CVSS7.7AI score0.01526EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
•added 2022/02/23 12:00 a.m.•88 views

Unspecified Vulnerability in IBM Planning Analytics (CNVD-2022-13923)

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. A security vulnerability exists in IBM Planning Analytics that stems from the vulnerability of IBM...

7.8CVSS7.7AI score0.00748EPSS
SaveExploits0References1
Rows per page
Query Builder