Lucene search
+L

5 matches found

Positive Technologies
Positive Technologies
•added 2024/03/07 12:00 a.m.•12 views

PT-2024-21968 · Unknown · Numbas Editor

Name of the Vulnerable Software and Affected Versions: Numbas editor versions prior to 7.3 Description: The issue concerns the mishandling of reading themes and extensions in the Numbas editor. Recommendations: For versions prior to 7.3, update to version 7.3 or later to resolve the issue...

7.3CVSS7.2AI score0.0046EPSS
SaveExploits0References7
OSV
OSV
•added 2018/03/02 8:29 p.m.•10 views

CVE-2017-9279

NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes handling of the User Application Administration, allowing malicious user administrators to potentially execute code or mislead users...

7.2CVSS5.9AI score0.00868EPSS
SaveExploits0References2
Prion
Prion
•added 2018/03/02 8:29 p.m.•22 views

Design/Logic Flaw

NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes handling of the User Application Administration, allowing malicious user administrators to potentially execute code or mislead users...

9CVSS7.5AI score0.00868EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2018/03/02 8:00 p.m.•61 views

CVE-2017-9279

CVE-2017-9279 affects NetIQ Identity Manager prior to 4.5.6.1. In the Themes handling of the User Application Administration, it allows uploading files with double extensions or non-image content, enabling a malicious administrator to potentially execute code or mislead users. Root cause: insuffi...

9CVSS5.5AI score0.00868EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/02 12:00 a.m.•5 views

CVE-2017-9279: Unrestricted Upload of File with Dangerous Type

NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes handling of the User Application Administration, allowing malicious user administrators to potentially execute code or mislead users...

9CVSS6.6AI score0.00868EPSS
SaveExploits0References3
Rows per page
Query Builder