CVE-2023-1864

FANUC ROBOGUIDE-HandlingPRO Versions 9 Rev.ZD and prior is vulnerable to a path traversal, which could allow an attacker to remotely read files on the system running the affected software...

CVE-2023-1864

FANUC ROBOGUIDE-HandlingPRO, Versions 9 Rev.ZD and prior, is affected by CVE-2023-1864 (path traversal). The root cause is improper limitation of a pathname to a restricted directory, enabling a remote attacker to read files on the system running the software. According to published advisories, t...

CVE-2023-33510

Jeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files through specific parameters...

Jeecg P3 Biz Chat 安全漏洞

Jeecg P3 Biz Chat is a Jeecg open source online chat plugin. A security vulnerability exists in Jeecg P3 Biz Chat version 1.0.5, which originated from a vulnerability that allows remote attackers to read arbitrary files via specific parameters...

CVE-2023-29159

Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to view files in a web service which was built using Starlette...

Starlette vulnerable to directory traversal

Overview Starlette provided by Encode contains a directory traversal vulnerability CWE-22. Masashi Yamane of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact Under certain conditions, a remote...

CVE-2023-29380

Warpinator before 1.6.0 allows remote file deletion via directory traversal in topdirbasenames...

CVE-2023-29380

Warpinator before 1.6.0 allows remote file deletion via directory traversal in topdirbasenames...

CVE-2023-29380

The CVE-2023-29380 vulnerability affects Warpinator prior to version 1.6.0 and is caused by a directory traversal in top_dir_basenames that enables remote deletion of files. The Red Hat/NVD entries confirm the issue and cite a fixed version (1.6.0). Impact is described as remote file deletion (ar...

CVE-2023-29380

Warpinator before 1.6.0 allows remote file deletion via directory traversal in topdirbasenames...

CVE-2023-29380

Warpinator before 1.6.0 allows remote file deletion via directory traversal in topdirbasenames...

CVE-2023-29380

Warpinator before 1.6.0 allows remote file deletion via directory traversal in topdirbasenames...

CVE-2023-2888

PHPOK 6.4.100 is affected by an unrestricted arbitrary file upload vulnerability in admin.php?c=upload&f=zip&_noCache=... remote; impact includes potential code execution via uploaded files. No patch/version fix details are provided in the connected documents; remediation status is unspecified. I...

CVE-2023-27507

MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload function and server save option are enabled, a remote attacker may save an arbitrary file on the server and execute it...

PT-2023-20928 · Sitecore · Sitecore Experience Platform

Name of the Vulnerable Software and Affected Versions: Site Core Experience Platform versions 10.2 and earlier Description: The issue allows authenticated remote attackers to download arbitrary files via Urlhandle. This is a Directory Traversal vulnerability. Recommendations: For Site Core...

PT-2023-2875 · D Link · D-Link D-View

Name of the Vulnerable Software and Affected Versions: D-Link D-View affected versions not specified Description: This issue allows remote attackers to create arbitrary files on affected installations of D-Link D-View, with authentication required to exploit it. The specific flaw exists within th...

PT-2023-2874 · D Link · D-Link D-View

Name of the Vulnerable Software and Affected Versions: D-Link D-View affected versions not specified Description: This issue allows remote attackers to create and delete arbitrary files on affected installations of D-Link D-View. Authentication is required to exploit this issue. The specific flaw...

PT-2023-3389 · Aruba · Aruba Edgeconnect Enterprise

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise affected versions not specified Description: The issue is related to multiple authenticated path traversal vulnerabilities in the command line interface of the Aruba EdgeConnect Enterprise platform. These...

CVE-2023-30247

File Upload vulnerability found in Oretnom23 Storage Unit Rental Management System v.1.0 allows a remote attacker to execute arbitrary code via the updatesettings parameter...

PT-2023-23856 · Trend Micro · Trend Micro Mobile Security

Name of the Vulnerable Software and Affected Versions: Trend Micro Mobile Security Enterprise version 9.8 SP5 Description: The issue allows a remote attacker to create arbitrary files on affected installations. To exploit this, an attacker must first obtain the ability to execute low-privileged...