CVE-2025-36535

The embedded web server lacks authentication and access controls, allowing unrestricted remote access. This could lead to configuration changes, operational disruption, or arbitrary code execution depending on the environment and exposed functionality...

CVE-2025-36535

CVE-2025-36535 affects AutomationDirect MB-Gateway. The embedded web server lacks authentication/access controls, allowing unrestricted remote access that could enable configuration changes, operational disruption, or arbitrary code execution depending on exposure. Public sources (NVD, CVE listin...

CVE-1999-0289

The Apache web server for Win32 may provide access to restricted files when a . dot is appended to a requested URL...

CVE-1999-0695

The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. dot dot attack...

CVE-1999-0883

Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine...

CVE-1999-0933

TeamTrack web server allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-1999-0884

The Zeus web server administrative interface uses weak encryption for its passwords...

CVE-1999-0173

FormMail CGI program can be used by web servers other than the host server that the program resides on...

CVE-1999-0177

The uploader program in the WebSite web server allows a remote attacker to execute arbitrary programs...

CVE-2025-36535: Missing Authentication for Critical Function

The embedded web server lacks authentication and access controls, allowing unrestricted remote access. This could lead to configuration changes, operational disruption, or arbitrary code execution depending on the environment and exposed functionality...

Vertiv Liebert RDU101 and Vertiv Liebert UNITY have security vulnerabilities

The Vertiv Liebert RDU101 and Vertiv Liebert UNITY are both products of Vertiv Corporation, U.S.A. The Vertiv Liebert RDU101 is a communication card.The Vertiv Liebert UNITY is a network card that provides Vertiv devices with network access, environmental sensor data, and third-party interface...

AutomationDirect MB-Gateway Access Control Vulnerability

AutomationDirect MB-Gateway is a single-port Modbus gateway module from AutomationDirect, Inc. that converts Modbus TCP to Modbus RTU. An access control error vulnerability exists in the AutomationDirect MB-Gateway that stems from a lack of authentication and access control on the embedded web...

CVE-2025-44883

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the tacIp parameter in the webtacplusserverEditpost function...

CVE-2025-39380: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla Hospital Management System hospital-management allows Upload a Web Shell to a Web Server.This issue affects Hospital Management System: from n/a through = 47.020-11-2023...

CVE-2025-47577: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Upload a Web Shell to a Web Server.This issue affects TI WooCommerce Wishlist: from n/a through = 2.9.2...

CVE-2025-39402: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS apartment-management allows Upload a Web Shell to a Web Server.This issue affects WPAMS: from n/a through = 44.0 17-08-2023...

CVE-2025-39401: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla WPAMS apartment-management allows Upload a Web Shell to a Web Server.This issue affects WPAMS: from n/a through = 44.0 17-08-2023...

Modbus AutomationDirect MB-Gateway Unauthorized Access

The vulnerability of the web server of the microprogramming-based Modbus AutomationDirect MB-Gateway software lies in the absence of an authentication mechanism for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the...

DEBIAN-CVE-2025-48050

In DOMPurify through 3.2.5 before 6bc6d60, scripts/server.js does not ensure that a pathname is located under the current working directory. NOTE: the Supplier disputes the significance of this report because the "Uncontrolled data used in path expression" occurs "in a development helper script...

CVE-2025-48050: Path Traversal: '../filedir'

In DOMPurify through 3.2.5 before 6bc6d60, scripts/server.js does not ensure that a pathname is located under the current working directory. NOTE: the Supplier disputes the significance of this report because the "Uncontrolled data used in path expression" occurs "in a development helper script...