Lucene search
+L

176 matches found

CNNVD
CNNVD
added 2024/04/10 12:00 a.m.18 views

Traccar 代码问题漏洞

Traccar is a Java-based website builder that provides GPS tracking functionality from Traccar Inc. in the United States. The software supports more than 170 GPS protocols and more than 1500 models of GPS tracking devices.Traccar can be used with any major SQL database system . It also provides an...

9.6CVSS9.3AI score0.17631EPSS
SaveExploits5References5
NVD
NVD
added 2024/01/15 4:15 p.m.29 views

CVE-2023-50729

Traccar is an open source GPS tracking system. Prior to 5.11, Traccar is affected by an unrestricted file upload vulnerability in File feature allows attackers to execute arbitrary code on the server. This vulnerability is more prevalent because Traccar is recommended to run web servers as root...

9.8CVSS9.3AI score0.006EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/15 4:15 p.m.34 views

Unrestricted file upload

Traccar is an open source GPS tracking system. Prior to 5.11, Traccar is affected by an unrestricted file upload vulnerability in File feature allows attackers to execute arbitrary code on the server. This vulnerability is more prevalent because Traccar is recommended to run web servers as root...

7.5CVSS8.1AI score0.006EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/15 3:57 p.m.39 views

CVE-2023-50729 An unrestricted file upload vulnerability in traccar leads to RCE

Traccar is an open source GPS tracking system. Prior to 5.11, Traccar is affected by an unrestricted file upload vulnerability in File feature allows attackers to execute arbitrary code on the server. This vulnerability is more prevalent because Traccar is recommended to run web servers as root...

8.4CVSS9.9AI score0.006EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/15 3:57 p.m.15 views

CVE-2023-50729 An unrestricted file upload vulnerability in traccar leads to RCE

Traccar is an open source GPS tracking system. Prior to 5.11, Traccar is affected by an unrestricted file upload vulnerability in File feature allows attackers to execute arbitrary code on the server. This vulnerability is more prevalent because Traccar is recommended to run web servers as root...

8.4CVSS9.6AI score
SaveExploits0References3
CVE
CVE
added 2024/01/15 3:57 p.m.64 views

CVE-2023-50729

CVE-2023-50729 affects Traccar before version 5.11, due to an unrestricted file upload vulnerability in the File feature. The issue allows an attacker to execute arbitrary code on the server and is particularly risky because Traccar can operate with root privileges and can write to arbitrary loca...

9.8CVSS9.7AI score0.006EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/01/15 12:00 a.m.14 views

Traccar Security Vulnerabilities

Traccar is the United States Traccar company of a Java-based GPS tracking can provide the function of building the system . The software supports more than 170 kinds of GPS protocols and more than 1500 models of GPS tracking devices . traccar can be used with any major SQL database system . It al...

9.8CVSS8.2AI score0.006EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/01/15 12:00 a.m.19 views

PT-2024-13959 · Traccar · Traccar

Name of the Vulnerable Software and Affected Versions: Traccar versions prior to 5.11 Description: Traccar, an open source GPS tracking system, is affected by an unrestricted file upload vulnerability in the File feature. This allows attackers to execute arbitrary code on the server. The issue is...

9.8CVSS9.6AI score0.006EPSS
SaveExploits0References5
CNVD
CNVD
added 2021/06/04 12:00 a.m.4 views

Traccar has a weak password vulnerability

Traccar is an open source GPS tracking system. Traccar suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

6.9AI score
SaveExploits0
OSV
OSV
added 2021/02/02 8:15 p.m.22 views

CVE-2021-21292

Traccar is an open source GPS tracking system. In Traccar before version 4.12 there is an unquoted Windows binary path vulnerability. Only Windows versions are impacted. Attacker needs write access to the filesystem on the host machine. If Java path includes a space, then attacker can lift their...

6.3CVSS6.7AI score
SaveExploits0References3
NVD
NVD
added 2021/02/02 8:15 p.m.25 views

CVE-2021-21292

Traccar is an open source GPS tracking system. In Traccar before version 4.12 there is an unquoted Windows binary path vulnerability. Only Windows versions are impacted. Attacker needs write access to the filesystem on the host machine. If Java path includes a space, then attacker can lift their...

6.3CVSS0.00393EPSS
SaveExploits0References3
Prion
Prion
added 2021/02/02 8:15 p.m.26 views

Design/Logic Flaw

Traccar is an open source GPS tracking system. In Traccar before version 4.12 there is an unquoted Windows binary path vulnerability. Only Windows versions are impacted. Attacker needs write access to the filesystem on the host machine. If Java path includes a space, then attacker can lift their...

1.9CVSS6.2AI score0.00393EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/02/02 7:35 p.m.35 views

CVE-2021-21292 Unquoted Windows binary path in Traccar

Traccar is an open source GPS tracking system. In Traccar before version 4.12 there is an unquoted Windows binary path vulnerability. Only Windows versions are impacted. Attacker needs write access to the filesystem on the host machine. If Java path includes a space, then attacker can lift their...

5.5CVSS6.5AI score0.00393EPSS
SaveExploits0References3
CVE
CVE
added 2021/02/02 7:35 p.m.60 views

CVE-2021-21292

The CVE-2021-21292 issue affects Traccar (open-source GPS tracking system) before version 4.12 on Windows. The vulnerability is an unquoted Windows binary path that, combined with a Java path containing a space, can allow privilege escalation to the Traccar service’s system level if the attacker ...

6.3CVSS5.8AI score0.00393EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2021/02/02 12:00 a.m.16 views

Traccar Code Issues Vulnerabilities

Traccar is the United States Traccar company of a Java-based GPS tracking can provide the function of building the system . The software supports more than 170 kinds of GPS protocols and more than 1500 models of GPS tracking devices . traccar can be used with any major SQL database system . It al...

6.3CVSS6.7AI score0.00393EPSS
SaveExploits0References4
NVD
NVD
added 2020/07/14 9:15 p.m.25 views

CVE-2020-5246

Traccar GPS Tracking System before version 4.9 has a LDAP injection vulnerability. It occurs when user input is being used in LDAP search filter. By providing specially crafted input, an attacker can modify the logic of the LDAP query and get admin privileges. The issue only impacts instances wit...

7.7CVSS0.00852EPSS
SaveExploits0References2
OSV
OSV
added 2020/07/14 9:15 p.m.19 views

CVE-2020-5246

Traccar GPS Tracking System before version 4.9 has a LDAP injection vulnerability. It occurs when user input is being used in LDAP search filter. By providing specially crafted input, an attacker can modify the logic of the LDAP query and get admin privileges. The issue only impacts instances wit...

6.5CVSS7.4AI score
SaveExploits0References2
attackerkb
attackerkb
added 2020/07/14 9:15 p.m.8 views

CVE-2020-5246

Traccar GPS Tracking System before version 4.9 has a LDAP injection vulnerability. It occurs when user input is being used in LDAP search filter. By providing specially crafted input, an attacker can modify the logic of the LDAP query and get admin privileges. The issue only impacts instances wit...

7.7CVSS6.4AI score0.00852EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2020/07/14 9:15 p.m.23 views

Design/Logic Flaw

Traccar GPS Tracking System before version 4.9 has a LDAP injection vulnerability. It occurs when user input is being used in LDAP search filter. By providing specially crafted input, an attacker can modify the logic of the LDAP query and get admin privileges. The issue only impacts instances wit...

4CVSS6.7AI score0.00852EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2020/07/14 8:42 p.m.63 views

CVE-2020-5246

CVE-2020-5246 affects Traccar GPS Tracking System prior to version 4.9. The issue is an LDAP injection vulnerability triggered when user input is used in LDAP search filters, allowing an attacker to modify query logic and potentially obtain admin privileges in LDAP-configured deployments. The vul...

7.7CVSS6.8AI score0.00852EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder