Lucene search
+L

10280 matches found

CNVD
CNVD
•added 2021/11/12 12:00 a.m.•41 views

Zoho ManageEngine ADAudit Plus Arbitrary File Write Vulnerability

Zoho ManageEngine ADAudit Plus is a web-based Active Directory change auditing and reporting solution. An arbitrary file write vulnerability exists in Zoho ManageEngine ADAudit Plus versions prior to 7006, which can be exploited by an attacker to write and execute arbitrary files on the system...

9.8CVSS7.1AI score0.70325EPSS
SaveExploits3References1
Jenkins Security Advisories
Jenkins Security Advisories
•added 2021/11/12 12:00 a.m.•13 views

Agent-to-controller security bypass in Squash TM Publisher (Squash4Jenkins) allows writing arbitrary files

Squash TM Publisher Squash4Jenkins 1.0.0 and earlier implements an agent-to-controller message that does not implement any validation of its input. This allows attackers able to control agent processes to replace arbitrary files on the Jenkins controller file system with an attacker-controlled JS...

8.1CVSS7.8AI score0.01104EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2021/11/11 5:15 a.m.•11 views

CVE-2021-42847

Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files...

9.8CVSS5.9AI score0.70325EPSS
SaveExploits3References2
NVD
NVD
•added 2021/11/11 5:15 a.m.•39 views

CVE-2021-42847

Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files...

9.8CVSS0.70325EPSS
SaveExploits3References2
attackerkb
attackerkb
•added 2021/11/11 5:15 a.m.•18 views

CVE-2021-42847

Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files...

9.8CVSS7.4AI score0.70325EPSS
SaveExploits3References4
CNNVD
CNNVD
•added 2021/11/11 12:00 a.m.•19 views

ZOHO ManageEngine ADAudit Plus 安全漏洞

Zoho ManageEngine ADAudit Plus is a web-based Active Directory change auditing and reporting solution. An arbitrary file write vulnerability exists in Zoho ManageEngine ADAudit Plus versions prior to 7006, which can be exploited by an attacker to write and execute arbitrary files on the system...

9.8CVSS6AI score0.70325EPSS
SaveExploits3References4
Cvelist
Cvelist
•added 2021/11/11 12:00 a.m.•38 views

CVE-2021-42847

Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files...

9.7AI score0.70325EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
•added 2021/11/11 12:00 a.m.•11 views

PT-2021-23695 · Zoho · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADAudit Plus versions prior to 7006 Description: The issue allows attackers to write to and execute arbitrary files, potentially leading to unauthorized access and malicious activities. Recommendations: For versions prior to...

9.8CVSS9.6AI score0.70325EPSS
SaveExploits3References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/11 12:00 a.m.•4 views

CVE-2021-42847: Undefined Security Weakness

Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files...

9.8CVSS5.9AI score0.70325EPSS
SaveExploits3References1
CNNVD
CNNVD
•added 2021/11/04 12:00 a.m.•12 views

Jenkins 安全漏洞

Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. Jenkins has a security vulnerability that stems from multiple vulnerabilities in the file path filtering implementation o...

9.8CVSS8.3AI score0.02532EPSS
SaveExploits0References18
CNVD
CNVD
•added 2021/11/03 12:00 a.m.•25 views

phpok Arbitrary File Write Vulnerability

phpok is a set of enterprise website system developed by Shenzhen锟絪 technology limited company using PHP+MYSQL language. An arbitrary file write vulnerability exists in the editsavef function in framework/admin/tplcontrol.php in phpok version 5.1. An attacker can exploit this vulnerability to wri...

9.1CVSS6.9AI score0.01007EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2021/11/03 12:00 a.m.•29 views

Cisco Firepower Threat Defense Software CLI Arbitrary File Write (cisco-sa-ftd-file-write-SHVcmQVc)

According to its self-reported version, Cisco FTD Software is affected by a vulnerability due to incomplete validation of user input for a specific CLI command. An authenticated, local attacker can exploit this, by authenticating to the device with administrative privileges, in order to overwrite...

6.6CVSS6.3AI score0.00216EPSS
SaveExploits0References4
OSV
OSV
•added 2021/11/02 6:15 p.m.•18 views

CVE-2020-18439

An issue was discoverered in in function editsavef in framework/admin/tplcontrol.php in qinggan phpok 5.1, allows attackers to write arbitrary files or get a shell...

9.1CVSS5.9AI score0.01007EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/11/02 5:44 p.m.•41 views

CVE-2020-18439

An issue was discoverered in in function editsavef in framework/admin/tplcontrol.php in qinggan phpok 5.1, allows attackers to write arbitrary files or get a shell...

9.2AI score0.01007EPSS
SaveExploits1References1
Mend
Mend
•added 2021/11/02 5:44 p.m.•3 views

CVE-2020-18439

An issue was discoverered in in function editsavef in framework/admin/tplcontrol.php in qinggan phpok 5.1, allows attackers to write arbitrary files or get a shell...

9.3CVSS0.01007EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/02 12:00 a.m.•8 views

CVE-2020-18439: Undefined Security Weakness

An issue was discoverered in in function editsavef in framework/admin/tplcontrol.php in qinggan phpok 5.1, allows attackers to write arbitrary files or get a shell...

9.1CVSS5.9AI score0.01007EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/11/02 12:00 a.m.•3 views

PT-2021-10170

Name of the Vulnerable Software and Affected Versions: qinggan phpok version 5.1 Description: An issue was discovered in the edit save f function in framework/admin/tpl control.php, allowing attackers to write arbitrary files or get a shell. Recommendations: For qinggan phpok version 5.1, conside...

9.1CVSS0.01007EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2021/11/02 12:00 a.m.•30 views

qinggan phpok 代码问题漏洞

phpok is a set of enterprise website system developed by Shenzhen锟絪 technology limited company using PHP+MYSQL language. An arbitrary file write vulnerability exists in the editsavef function in framework/admin/tplcontrol.php in phpok version 5.1. An attacker can exploit this vulnerability to wri...

9.1CVSS5.8AI score0.01007EPSS
SaveExploits1References1
OSV
OSV
•added 2021/10/28 7:15 p.m.•9 views

CVE-2021-30833

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files...

5.5CVSS6.2AI score0.42674EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/28 12:00 a.m.•5 views

CVE-2021-30833: Undefined Security Weakness

This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files...

5.5CVSS5.9AI score0.42674EPSS
SaveExploits0References1
Rows per page
Query Builder