Lucene search
+L

2832 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
โ€ขadded 2024/03/06 12:00 a.m.โ€ข3 views

CVE-2023-49979: Missing Authorization

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...

7.5CVSS5.8AI score0.00745EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
โ€ขadded 2024/03/06 12:00 a.m.โ€ข21 views

CVE-2023-49979

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...

7AI score0.00745EPSS
SaveExploits1References2
NVD
NVD
โ€ขadded 2024/03/05 12:15 a.m.โ€ข22 views

CVE-2024-25164

iA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to expose sensitive files via the download functionality...

7.5CVSS6.5AI score0.00869EPSS
SaveExploits1References2
Prion
Prion
โ€ขadded 2024/03/05 12:15 a.m.โ€ข43 views

Path traversal

iA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to expose sensitive files via the download functionality...

6.7AI score0.00869EPSS
SaveExploits1References2
CNNVD
CNNVD
โ€ขadded 2024/03/05 12:00 a.m.โ€ข17 views

IDURAR ERP/CRM Security Breach

IDURAR ERP/CRM is an open source content management system by Salah Eddine Lalami, an individual developer. A security vulnerability exists in IDURAR ERP/CRM v2.0.0, which stems from a path traversal vulnerability that can be exploited by an attacker to expose sensitive files via the download...

7.5CVSS6.7AI score0.00869EPSS
SaveExploits1References3
zdt
zdt
โ€ขadded 2024/03/05 12:00 a.m.โ€ข343 views

RAD SecFlow-2 Path Traversal Vulnerability

RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 suffer from a directory traversal vulnerability. Exploit Title: Path traversal in RAD SecFlow-2 devices with Firmware 4.1.01.63 CVE: CVE-2019-6268 Exploit Author: Branko Milicevic RAD SecFlow-2 devices with Hardware...

7.5CVSS7.4AI score0.0082EPSS
SaveExploits2
GithubExploit
GithubExploit
โ€ขadded 2024/03/04 6:32 p.m.โ€ข318 views

Exploit for Path Traversal in Grafana

CVE-2021-43798 - Grafana Directory Traversal ๐Ÿ” Grafana is an...

7.5CVSS7.6AI score0.88503EPSS
SaveExploits49
Positive Technologies
Positive Technologies
โ€ขadded 2024/03/04 12:00 a.m.โ€ข21 views

PT-2024-20792 ยท Idurar ยท Idurar

Name of the Vulnerable Software and Affected Versions: iDURAR version 2.0.0 Description: A Path Traversal vulnerability exists, allowing unauthenticated attackers to expose sensitive files via the download functionality. The issue can be exploited using backslashes. For example, an attacker can u...

7.5CVSS7.2AI score0.00869EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
โ€ขadded 2024/03/04 12:00 a.m.โ€ข20 views

CVE-2024-25164

iA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to expose sensitive files via the download functionality...

6.8AI score0.00869EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
โ€ขadded 2024/03/04 12:00 a.m.โ€ข5 views

CVE-2024-25164: Improper Limitation of a Pathname to a Restricted Directory

iA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to expose sensitive files via the download functionality...

7.5CVSS5.9AI score0.00869EPSS
SaveExploits1References2
Cvelist
Cvelist
โ€ขadded 2024/03/04 12:00 a.m.โ€ข36 views

CVE-2024-25164

iA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to expose sensitive files via the download functionality...

6.7AI score0.00869EPSS
SaveExploits1References2
OSV
OSV
โ€ขadded 2024/03/01 10:15 p.m.โ€ข17 views

CVE-2023-49545

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...

7.5CVSS5.8AI score0.00769EPSS
SaveExploits1References3
attackerkb
attackerkb
โ€ขadded 2024/03/01 10:15 p.m.โ€ข16 views

CVE-2023-49545

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...

7.5CVSS5.8AI score0.00769EPSS
SaveExploits1References4
NVD
NVD
โ€ขadded 2024/03/01 10:15 p.m.โ€ข36 views

CVE-2023-49545

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...

7.5CVSS6.4AI score0.00769EPSS
SaveExploits1References3
Prion
Prion
โ€ขadded 2024/03/01 10:15 p.m.โ€ข28 views

Authorization

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...

7AI score0.00769EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
โ€ขadded 2024/03/01 12:00 a.m.โ€ข21 views

CVE-2023-49545

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...

6.7AI score0.00769EPSS
SaveExploits1References3
CVE
CVE
โ€ขadded 2024/03/01 12:00 a.m.โ€ข94 views

CVE-2023-49545

Customer Support System v1 is affected by a directory listing vulnerability that allows unauthenticated attackers to view directories and sensitive files. Specifically, accessing paths such as /customer_support/database/ or /customer_support/assets/ can expose important application files. The vul...

7.5CVSS6.6AI score0.00769EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
โ€ขadded 2024/03/01 12:00 a.m.โ€ข51 views

CVE-2023-49545

A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...

6.6AI score0.00769EPSS
SaveExploits1References3
OSV
OSV
โ€ขadded 2024/02/28 6:30 a.m.โ€ข51 views

GHSA-6W5Q-79RF-7C49 Webtrees Path Traversal vulnerability

Webtrees 2.1.18 is vulnerable to Directory Traversal. By manipulating the "mediafolder" parameter in the URL, an attacker in this case, an administrator can navigate beyond the intended directory the 'media/' directory to access sensitive files in other parts of the application's file system...

6.9CVSS6.6AI score0.00876EPSS
SaveExploits1References3
Prion
Prion
โ€ขadded 2024/02/28 6:15 a.m.โ€ข40 views

Directory traversal

Webtrees 2.1.18 is vulnerable to Directory Traversal. By manipulating the "mediafolder" parameter in the URL, an attacker in this case, an administrator can navigate beyond the intended directory the 'media/' directory to access sensitive files in other parts of the application's file system...

6.6AI score0.00876EPSS
SaveExploits1References1
Rows per page
Query Builder