Lucene search
+L

2111 matches found

NVD
NVD
added 2024/01/26 8:15 a.m.19 views

CVE-2023-6919

Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal. This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C...

7.5CVSS7.5AI score0.00587EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/01/26 8:15 a.m.8 views

CVE-2023-6919

Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal. This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C...

7.5CVSS7.1AI score0.00587EPSS
SaveExploits0References3
Prion
Prion
added 2024/01/26 8:15 a.m.18 views

Path traversal

Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal.This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C...

5CVSS7.2AI score0.00587EPSS
SaveExploits0References1Affected Software9
Vulnrichment
Vulnrichment
added 2024/01/26 7:52 a.m.5 views

CVE-2023-6919 Path Traversal in VGuard IP Camera Network Recorder

Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal. This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C...

7.5CVSS7.1AI score0.00587EPSS
SaveExploits0References2
CVE
CVE
added 2024/01/26 7:52 a.m.54 views

CVE-2023-6919

CVE-2023-6919 describes a Path Traversal vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard prior to version V500.0003.R008.4011.C0012.B351.C. The flaw allows an absolute path traversal via the "/.. /filedir" payload, potentially enabling access to files outside the web root. A...

7.5CVSS7.1AI score0.00587EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/26 12:0 a.m.6 views

PT-2024-15122 · Biges Safe Life Technologies Electronics Inc · Vguard

Name of the Vulnerable Software and Affected Versions: Biges Safe Life Technologies Electronics Inc. VGuard versions prior to V500.0003.R008.4011.C0012.B351.C Description: The issue is related to a Path Traversal vulnerability, specifically an Absolute Path Traversal, which can be exploited using...

7.5CVSS7.3AI score0.00587EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2024/01/11 3:18 p.m.22 views

cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code

Impact What kind of vulnerability is it? Who is impacted? An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0 at and since 0.5.0, before 0.15.0. The vulnerability stems from a Python function,...

2.8CVSS6.5AI score0.0041EPSS
SaveExploits1References18Affected Software2
OSV
OSV
added 2024/01/11 3:18 p.m.25 views

GHSA-RGRF-6MF5-M882 cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code

Impact What kind of vulnerability is it? Who is impacted? An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions matching the pattern 0.x.0 at and since 0.5.0, before 0.15.0. The vulnerability stems from a Python function,...

2.2CVSS3.4AI score0.0041EPSS
SaveExploits1References18
Github Security Blog
Github Security Blog
added 2023/12/28 9:30 p.m.36 views

Ansible symlink attack vulnerability

An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path...

6.3CVSS7AI score0.00859EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2023/12/28 9:30 p.m.31 views

GHSA-JPVW-P8PR-9G2X Ansible symlink attack vulnerability

An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path...

6.3CVSS6.3AI score0.00859EPSS
SaveExploits0References9
NVD
NVD
added 2023/12/27 3:15 p.m.13 views

CVE-2023-6190

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in İzmir Katip Çelebi University University Information Management System allows Absolute Path Traversal. This issue affects University Information Management System: before 30.11.2023...

9.8CVSS0.00764EPSS
SaveExploits0References2
Prion
Prion
added 2023/12/27 3:15 p.m.18 views

Input validation

Improper Input Validation vulnerability in Izmir Katip Çelebi University University Information Management System allows Absolute Path Traversal.This issue affects University Information Management System: before 30.11.2023...

7.5CVSS9.3AI score0.00764EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/27 2:36 p.m.47 views

CVE-2023-6190

CVE-2023-6190 is an authentication-relevant path traversal vulnerability in İzmir Katip Çelebi University University Information Management System, caused by improper limitation of a pathname to a restricted directory (absolute path traversal). The NVD entry notes impact across confidentiality, i...

9.8CVSS8.4AI score0.00764EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/12/27 2:36 p.m.24 views

CVE-2023-6190 Authenicated Path Traversal in İzmir Katip Çelebi University

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in İzmir Katip Çelebi University University Information Management System allows Absolute Path Traversal. This issue affects University Information Management System: before 30.11.2023...

9.8CVSS9.6AI score0.00764EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/12/27 12:0 a.m.4 views

PT-2023-32559

Name of the Vulnerable Software and Affected Versions İzmir Katip Çelebi University University Information Management System versions prior to 30.11.2023 Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allow...

9.8CVSS7.3AI score0.00764EPSS
SaveExploits0References11
NVD
NVD
added 2023/12/25 6:15 a.m.31 views

CVE-2022-41761

An issue was discovered in NOKIA NFM-T R19.9. An Absolute Path Traversal vulnerability exists under /cgi-bin/R19.9/viewlog.pl of the VM Manager WebUI via the logfile parameter, allowing a remote authenticated attacker to read arbitrary files...

6.5CVSS0.008EPSS
SaveExploits1References1
OSV
OSV
added 2023/12/25 6:15 a.m.7 views

CVE-2022-41761

An issue was discovered in NOKIA NFM-T R19.9. An Absolute Path Traversal vulnerability exists under /cgi-bin/R19.9/viewlog.pl of the VM Manager WebUI via the logfile parameter, allowing a remote authenticated attacker to read arbitrary files...

6.5CVSS5.9AI score0.008EPSS
SaveExploits1References1
Prion
Prion
added 2023/12/25 6:15 a.m.23 views

Path traversal

An issue was discovered in NOKIA NFM-T R19.9. An Absolute Path Traversal vulnerability exists under /cgi-bin/R19.9/viewlog.pl of the VM Manager WebUI via the logfile parameter, allowing a remote authenticated attacker to read arbitrary files...

4CVSS6.8AI score0.008EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/12/25 12:0 a.m.7 views

Nokia NFM-T Security Vulnerability

Nokia NFM-T is a transport network function manager from Nokia of Finland. A security vulnerability exists in Nokia NFM-T version R19.9, which originates from an absolute path traversal vulnerability that could allow an authenticated, remote attacker to read arbitrary files...

6.5CVSS6.7AI score0.008EPSS
SaveExploits1References2
CVE
CVE
added 2023/12/25 12:0 a.m.44 views

CVE-2022-41761

The issue is an Absolute Path Traversal in Nokia NFM-T R19.9 VM Manager WebUI. Affected component is the endpoint /cgi-bin/R19.9/viewlog.pl, exploitable via the logfile parameter by an authenticated remote attacker to read arbitrary files. Root cause is path traversal in that endpoint; no public ...

6.5CVSS6.2AI score0.008EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder