Lucene search
K

2184 matches found

Cvelist
Cvelist
added 2024/01/15 2:37 a.m.23 views

CVE-2023-48383 NetVision Information airPASS - Path Traversal

NetVision Information airPASS has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

7.5CVSS8AI score0.0098EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/01/10 12:0 a.m.3 views

Bosch Nexo cordless nutrunner security breach

Bosch Nexo Cordless nutrunner is a series of cordless tightening wrenches with integrated controls from Bosch Germany. A security vulnerability exists in Bosch Nexo cordless nutrunner. The vulnerability allows a remote attacker to download arbitrary files in all system paths via a crafted HTTP...

6.5CVSS6.8AI score0.00778EPSS
Exploits0References2
OSV
OSV
added 2023/12/29 2:15 a.m.3 views

CVE-2023-23436

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...

7.1CVSS5.8AI score0.00113EPSS
Exploits0References1
OSV
OSV
added 2023/12/29 2:15 a.m.2 views

CVE-2023-23432

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...

7.1CVSS7.1AI score0.00113EPSS
Exploits0References1
OSV
OSV
added 2023/12/29 2:15 a.m.3 views

CVE-2023-23433

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...

7.1CVSS5.8AI score0.00113EPSS
Exploits0References1
OSV
OSV
added 2023/12/29 2:15 a.m.2 views

CVE-2023-23435

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...

7.1CVSS5.8AI score0.00111EPSS
Exploits0References1
OSV
OSV
added 2023/12/29 2:15 a.m.3 views

CVE-2023-23431

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file...

7.1CVSS5.8AI score0.00119EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/12/29 12:0 a.m.3 views

Honor NTH-AN00 Data Forgery Issue Vulnerability

The Honor NTH-AN00 Honor 50 is a smartphone from the Chinese company Honor. The Honor NTH-AN00 suffers from a security vulnerability that stems from a signature management vulnerability, successful exploitation of which could result in a forged system file overwriting a correct system file...

7.3CVSS6.7AI score0.00119EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/12/28 12:0 a.m.4 views

PT-2023-18944

Name of the Vulnerable Software and Affected Versions Honor products affected versions not specified Description The issue concerns a signature management vulnerability. Successful exploitation could cause a forged system file to overwrite the correct system file. Recommendations At the moment,...

7.3CVSS7.1AI score0.00113EPSS
Exploits0References6
NVD
NVD
added 2023/12/16 1:15 a.m.6 views

CVE-2020-17485

A Remote Code Execution vulnerability exist in Uffizio's GPS Tracker all versions. The web server can be compromised by uploading and executing a web/reverse shell. An attacker could then run commands, browse system files, and browse local resources...

9.8CVSS0.01837EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/12/16 12:0 a.m.12 views

CVE-2020-17485

A Remote Code Execution vulnerability exist in Uffizio's GPS Tracker all versions. The web server can be compromised by uploading and executing a web/reverse shell. An attacker could then run commands, browse system files, and browse local resources...

9.4AI score0.01837EPSS
Exploits0References2
NVD
NVD
added 2023/12/15 9:15 a.m.9 views

CVE-2023-48389

Multisuns EasyLog web+ has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

7.5CVSS0.01314EPSS
Exploits0References1
Prion
Prion
added 2023/12/15 9:15 a.m.14 views

Path traversal

Multisuns EasyLog web+ has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

5CVSS7.7AI score0.01314EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/15 8:50 a.m.6 views

CVE-2023-48389 Multisuns EasyLog web+ - Path Traversal

Multisuns EasyLog web+ has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

7.5CVSS7.5AI score0.01314EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/12/15 8:50 a.m.14 views

CVE-2023-48389 Multisuns EasyLog web+ - Path Traversal

Multisuns EasyLog web+ has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

7.5CVSS8AI score0.01314EPSS
Exploits0References1
OSV
OSV
added 2023/12/15 8:15 a.m.1 views

CVE-2023-48378

Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

7.5CVSS5.9AI score0.01314EPSS
Exploits0References1
NVD
NVD
added 2023/12/15 8:15 a.m.11 views

CVE-2023-48378

Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

7.5CVSS0.01314EPSS
Exploits0References1
Prion
Prion
added 2023/12/15 8:15 a.m.15 views

Path traversal

Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

5CVSS7.7AI score0.01314EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/15 8:1 a.m.13 views

CVE-2023-48378 Softnext Mail SQR Expert - Path Traversal

Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

7.5CVSS8AI score0.01314EPSS
Exploits0References1
OSV
OSV
added 2023/12/15 5:15 a.m.1 views

CVE-2023-48373

ITPison OMICARD EDM has a path traversal vulnerability within its parameter “FileName” in a specific function. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

7.5CVSS5.9AI score0.01314EPSS
Exploits0References1
Rows per page
Query Builder