Lucene search
+L

11 matches found

Nuclei
Nuclei
•added 2026/10/08 2:15 a.m.•102 views

Zaver - Local File Inclusion

Zaver through 2020-12-15 is vulnerable to local file inclusion via the GET /.. substring. id: CVE-2022-38794 info: name: Zaver - Local File Inclusion author: pikpikcu severity: high description: | Zaver through 2020-12-15 is vulnerable to local file inclusion via the GET /.. substring. impact: |...

7.5CVSS7.5AI score0.03928EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2026/01/09 10:57 a.m.•8 views

CVE-2022-38794

Zaver through 2020-12-15 allows directory traversal via the GET /.. substring...

7.5CVSS8.3AI score0.03928EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/08/27 9:15 p.m.•8 views

CVE-2022-38794

Zaver through 2020-12-15 allows directory traversal via the GET /.. substring...

7.5CVSS5.8AI score0.03928EPSS
SaveExploits1References3
OSV
OSV
•added 2022/08/27 9:15 p.m.•21 views

CVE-2022-38794

Zaver through 2020-12-15 allows directory traversal via the GET /.. substring...

7.5CVSS7.3AI score0.03928EPSS
SaveExploits1References1
NVD
NVD
•added 2022/08/27 9:15 p.m.•31 views

CVE-2022-38794

Zaver through 2020-12-15 allows directory traversal via the GET /.. substring...

7.5CVSS0.03928EPSS
SaveExploits1References1
Prion
Prion
•added 2022/08/27 9:15 p.m.•29 views

Directory traversal

Zaver through 2020-12-15 allows directory traversal via the GET /.. substring...

5CVSS7.5AI score0.03928EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/08/27 8:26 p.m.•41 views

CVE-2022-38794

Zaver through 2020-12-15 allows directory traversal via the GET /.. substring...

7.9AI score0.03928EPSS
SaveExploits1References1
CVE
CVE
•added 2022/08/27 8:26 p.m.•141 views

CVE-2022-38794

Zaver (through 2020-12-15) is vulnerable to Local File Inclusion via the GET /.. substring. The connected Nuclei template confirms the flaw as a local file inclusion issue, enabling potential unauthorized access and data leakage. Impact details in the template mention possible remote code executi...

7.5CVSS7.7AI score0.03928EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2022/08/27 12:00 a.m.•16 views

Zaver 路径遍历漏洞

Zaver is a fast and efficient HTTP server for individual developers. A security vulnerability exists in Zaver version 2020-12-15 and earlier that stems from allowing directory traversal via substrings...

7.5CVSS6.8AI score0.03928EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/08/27 12:00 a.m.•22 views

PT-2022-24571 · Zaver · Zaver

Name of the Vulnerable Software and Affected Versions: Zaver versions through 2020-12-15 Description: The issue allows directory traversal via the GET /.. substring. This can be exploited through the "GET /.. substring" API endpoint. Recommendations: For versions through 2020-12-15, consider...

7.5CVSS7.9AI score0.03928EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/27 12:00 a.m.•4 views

CVE-2022-38794: Improper Limitation of a Pathname to a Restricted Directory

Zaver through 2020-12-15 allows directory traversal via the GET /.. substring...

7.5CVSS7.2AI score0.03928EPSS
SaveExploits1References2
Rows per page
Query Builder