Lucene search
+L

1438 matches found

Vulnrichment
Vulnrichment
added 2022/09/22 1:32 p.m.9 views

CVE-2022-40443

An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /one/siteinfo.php...

6.5AI score0.02224EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/09/19 4:15 p.m.4 views

CVE-2022-40715

An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily...

6.5CVSS5.9AI score0.01121EPSS
SaveExploits0References2
Prion
Prion
added 2022/09/19 4:15 p.m.28 views

Path traversal

An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily...

4CVSS6.2AI score0.01121EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/09/19 3:52 p.m.87 views

CVE-2022-40715

Summary : CVE-2022-40715 affects Nokia 1350 OMS (R14.2). An Absolute Path Traversal vulnerability exists in a specific endpoint exploitable via the logfile parameter, allowing a remote authenticated attacker to read arbitrary files on the filesystem. The issue is centered on a vulnerable endpoint...

6.5CVSS6.1AI score0.01121EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2022/09/05 4:15 p.m.34 views

CVE-2022-39838

Systematic FIX Adapter ALFAFX 2.4.0.25 13/09/2017 allows remote file inclusion via a UNC share pathname, and also allows absolute path traversal to local pathnames...

8.6CVSS0.01901EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2022/09/05 3:39 p.m.50 views

CVE-2022-39838

Systematic FIX Adapter ALFAFX 2.4.0.25 13/09/2017 allows remote file inclusion via a UNC share pathname, and also allows absolute path traversal to local pathnames...

8.5AI score0.01901EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2022/09/05 12:00 a.m.11 views

Systematic Alpha Management FIX Adapter 路径遍历漏洞

Systematic Alpha Management FIX Adapter is an adapter from Systematic Alpha Management, USA. A security vulnerability exists in Systematic Alpha Management FIX Adapter ALFAFX version 2.4.0.25 13/09/2017, which stems from a vulnerability that allows remote files to be included via UNC shared...

8.6CVSS7.9AI score0.01901EPSS
SaveExploits2References4
OpenVAS
OpenVAS
added 2022/08/12 12:00 a.m.50 views

WinRAR <= 5.61 Absolute Path Traversal Vulnerability

WinRAR is prone to an absolute path traversal vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

7.8CVSS7.8AI score0.96274EPSS
SaveExploits14References2
OSV
OSV
added 2022/07/13 3:43 p.m.27 views

GHSA-7488-6X3R-23W5 Ganga allows absolute path traversal

The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS9.3AI score0.01648EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
added 2022/07/13 3:43 p.m.28 views

Ganga allows absolute path traversal

The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS8.9AI score0.01648EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2022/07/12 12:00 a.m.37 views

GHSA-QP72-96P2-G644 Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely

The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS9.4AI score0.01245EPSS
SaveExploits0References3
OSV
OSV
added 2022/07/11 1:15 a.m.7 views

CVE-2022-31581

The scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01506EPSS
SaveExploits1References2
OSV
OSV
added 2022/07/11 1:15 a.m.8 views

CVE-2022-31576

The heidi-luong1109/shackerpanel repository through 2021-05-25 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01352EPSS
SaveExploits1References1
OSV
OSV
added 2022/07/11 1:15 a.m.10 views

CVE-2022-31584

The stonethree/s3label repository through 2019-08-14 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01352EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.7 views

CVE-2022-31580

The sanojtharindu/caretakerr-api repository through 2021-05-17 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01352EPSS
SaveExploits1References2
OSV
OSV
added 2022/07/11 1:15 a.m.11 views

CVE-2022-31580

The sanojtharindu/caretakerr-api repository through 2021-05-17 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01352EPSS
SaveExploits1References1
OSV
OSV
added 2022/07/11 1:15 a.m.9 views

CVE-2022-31582

The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01352EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.2 views

CVE-2022-31578

The piaoyunsoft/btlnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

7.5CVSS5.3AI score0.01302EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:15 a.m.7 views

CVE-2022-31583

The sravaniboinepelli/AutomatedQuizEval repository through 2020-04-27 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01352EPSS
SaveExploits1References2
OSV
OSV
added 2022/07/11 1:15 a.m.10 views

CVE-2022-31586

The unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01299EPSS
SaveExploits1References1
Rows per page
Query Builder