Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2023-53628

Malicious code in bioql PyPI...

7.8CVSS7.7AI score0.00537EPSS
Exploits1References2
Cvelist
Cvelist
added 2018/04/27 4:0 a.m.23 views

CVE-2018-10469

b3log Symphony aka Sym 2.6.0 allows remote attackers to upload and execute arbitrary JSP files via the name parameter to the /upload URI...

9.8AI score0.02157EPSS
Exploits1References1
Prion
Prion
added 2017/01/23 9:59 p.m.16 views

Directory traversal

Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to upload and execute arbitrary JSP files via a .. dot dot in the fileName parameter to servlets/FileUploadServlet...

7.5CVSS7.7AI score0.9045EPSS
Exploits7References8Affected Software1
CVE
CVE
added 2017/01/23 9:0 p.m.65 views

CVE-2016-6600

The CVE refers to a directory traversal vulnerability in WebNMS Framework Server 5.2 and 5.2 SP1 (ZOHO WebNMS) via FileUploadServlet, where a crafted fileName with .. allows remote attackers to upload and execute JSP files. A Metasploit module and multiple advisories document an arbitrary file up...

9.8CVSS9.5AI score0.9045EPSS
Exploits7References8Affected Software1
Prion
Prion
added 2016/04/22 10:59 a.m.19 views

Directory traversal

Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary JSP files via a .. dot dot in a filename within a multipart/form-data POST request to a LiveTime.woa URL...

6.5CVSS7.2AI score0.64142EPSS
Exploits7References8Affected Software1
NVD
NVD
added 2016/04/22 10:59 a.m.21 views

CVE-2016-1593

Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary JSP files via a .. dot dot in a filename within a multipart/form-data POST request to a LiveTime.woa URL...

7.2CVSS7AI score0.64142EPSS
Exploits7References8
Cvelist
Cvelist
added 2016/04/22 10:0 a.m.24 views

CVE-2016-1593

Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary JSP files via a .. dot dot in a filename within a multipart/form-data POST request to a LiveTime.woa URL...

7AI score0.64142EPSS
Exploits7References8
CNVD
CNVD
added 2015/11/12 12:0 a.m.5 views

Lenovo Switch Center Local Lift Vulnerability

Lenovo Switch Center formerly known as IBM System Networking Switch Center is a suite of applications used by Lenovo in China to remotely monitor and manage Ethernet converged switches. A local lift vulnerability exists in IBM System Networking Switch Center versions 7.1.3.4 and earlier and Lenov...

7.2CVSS6.5AI score0.00434EPSS
Exploits0References1
Rows per page
Query Builder