33188 matches found
CVE-2023-33510
Jeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files through specific parameters...
Jeecg P3 Biz Chat security vulnerabilities
Jeecg P3 Biz Chat is a Jeecg open source online chat plugin. A security vulnerability exists in Jeecg P3 Biz Chat version 1.0.5, which originated from a vulnerability that allows remote attackers to read arbitrary files via specific parameters...
CVE-2023-1864: Improper Limitation of a Pathname to a Restricted Directory
FANUC ROBOGUIDE-HandlingPRO Versions 9 Rev.ZD and prior is vulnerable to a path traversal, which could allow an attacker to remotely read files on the system running the affected software...
CVE-2023-29159
Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to view files in a web service which was built using Starlette...
Starlette vulnerable to directory traversal
Overview Starlette provided by Encode contains a directory traversal vulnerability CWE-22. Masashi Yamane of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact Under certain conditions, a remote...
CVE-2023-29380
Warpinator before 1.6.0 allows remote file deletion via directory traversal in topdirbasenames...
CVE-2023-29380
Warpinator before 1.6.0 allows remote file deletion via directory traversal in topdirbasenames...
CVE-2023-29380
The CVE-2023-29380 vulnerability affects Warpinator prior to version 1.6.0 and is caused by a directory traversal in top_dir_basenames that enables remote deletion of files. The Red Hat/NVD entries confirm the issue and cite a fixed version (1.6.0). Impact is described as remote file deletion (ar...
CVE-2023-29380
Warpinator before 1.6.0 allows remote file deletion via directory traversal in topdirbasenames...
CVE-2023-29380: Improper Limitation of a Pathname to a Restricted Directory
Warpinator before 1.6.0 allows remote file deletion via directory traversal in topdirbasenames...
CVE-2023-29380
Warpinator before 1.6.0 allows remote file deletion via directory traversal in topdirbasenames...
CVE-2023-29380
Warpinator before 1.6.0 allows remote file deletion via directory traversal in topdirbasenames...
CVE-2023-29380
Warpinator before 1.6.0 allows remote file deletion via directory traversal in topdirbasenames...
CVE-2023-2888
PHPOK 6.4.100 is affected by an unrestricted arbitrary file upload vulnerability in admin.php?c=upload&f=zip&_noCache=... remote; impact includes potential code execution via uploaded files. No patch/version fix details are provided in the connected documents; remediation status is unspecified. I...
CVE-2023-27507
MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it...
PT-2023-20928 · Sitecore · Sitecore Experience Platform
Name of the Vulnerable Software and Affected Versions: Site Core Experience Platform versions 10.2 and earlier Description: The issue allows authenticated remote attackers to download arbitrary files via Urlhandle. This is a Directory Traversal vulnerability. Recommendations: For Site Core...
PT-2023-2875 · D Link · D-Link D-View
Name of the Vulnerable Software and Affected Versions: D-Link D-View affected versions not specified Description: This issue allows remote attackers to create arbitrary files on affected installations of D-Link D-View, with authentication required to exploit it. The specific flaw exists within th...
PT-2023-2874 · D Link · D-Link D-View
Name of the Vulnerable Software and Affected Versions: D-Link D-View affected versions not specified Description: This issue allows remote attackers to create and delete arbitrary files on affected installations of D-Link D-View. Authentication is required to exploit this issue. The specific flaw...
PT-2023-3389 · Aruba · Aruba Edgeconnect Enterprise
Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise affected versions not specified Description: The issue is related to multiple authenticated path traversal vulnerabilities in the command line interface of the Aruba EdgeConnect Enterprise platform. These...