Lucene search
+L

2549 matches found

Vulnrichment
Vulnrichment
added 2022/12/06 5:37 p.m.11 views

CVE-2022-23470 Arbitrary file access in the Galaxy data analysis platform

Galaxy is an open-source platform for data analysis. An arbitrary file read exists in Galaxy 22.01 and Galaxy 22.05 due to the switch to Gunicorn, which can be used to read any file accessible to the operating system user under which Galaxy is running. This vulnerability affects Galaxy 22.01 and...

8.6CVSS8.5AI score0.00821EPSS
SaveExploits0References2
WPVulnDB
WPVulnDB
added 2022/12/05 12:00 a.m.28 views

Welcart e-Commerce < 2.8.5 - Unauthenticated Arbitrary File Access

The plugin does not validate user input before using it to output the content of a file, which could allow unauthenticated attacker to read arbitrary files on the server This is a different issue than CVE-2022-41840 PoC...

9.8CVSS1.5AI score0.05212EPSS
SaveExploits3Affected Software1
WPVulnDB
WPVulnDB
added 2022/12/05 12:00 a.m.17 views

Welcart e-Commerce < 2.8.5 - Subscriber+ Arbitrary File Access

The plugin does not validate user input before using it to output the content of a file via an AJAX action available to any authenticated users, which could allow users with a role as low as subscriber to read arbitrary files on the server. PoC Run the below command in the developer console of th...

6.5CVSS2.6AI score0.00795EPSS
SaveExploits2Affected Software1
wpexploit
wpexploit
added 2022/12/05 12:00 a.m.81 views

Welcart e-Commerce < 2.8.5 - Subscriber+ Arbitrary File Access

The plugin does not validate user input before using it to output the content of a file via an AJAX action available to any authenticated users, which could allow users with a role as low as subscriber to read arbitrary files on the server. Run the below command in the developer console of the we...

6.5CVSS0.00795EPSS
SaveExploits2
wpexploit
wpexploit
added 2022/12/05 12:00 a.m.131 views

Welcart e-Commerce < 2.8.5 - Unauthenticated Arbitrary File Access

The plugin does not validate user input before using it to output the content of a file, which could allow unauthenticated attacker to read arbitrary files on the server This is a different issue than CVE-2022-41840...

9.8CVSS2.9AI score0.05212EPSS
SaveExploits3
WPVulnDB
WPVulnDB
added 2022/11/30 12:00 a.m.20 views

Easy WP SMTP < 1.5.2 - Admin+ Arbitrary File Access

The plugin does not validate some user input used to generate paths, which could allow high privilege users such as admin to access arbitrary files even when they should not be able to, for example in multisite via a traversal attack...

6.8CVSS4.9AI score0.00791EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2022/11/29 12:00 a.m.10 views

static-dev-server 路径遍历漏洞

static-dev-server is a simple http server for serving static resource files from a local directory and automatically reloading them when they change. A directory traversal vulnerability exists in all versions of npm static-dev-server, which stems from a lack of validity checking of paths when...

7.5CVSS6.7AI score0.00986EPSS
SaveExploits1References3
NVD
NVD
added 2022/11/21 11:15 a.m.24 views

CVE-2021-24649

The WP User Frontend WordPress plugin before 3.5.29 uses a user supplied argument called urhidden in its registration form, which contains the role for the account to be created with, encrypted via wpufencryption. This could allow an attacker having access to the AUTHKEY and AUTHSALT constant via...

9.8CVSS0.00652EPSS
SaveExploits2References1
OSV
OSV
added 2022/11/16 10:15 p.m.16 views

CVE-2022-44008

An issue was discovered in BACKCLICK Professional 5.9.63. Due to improper validation, arbitrary local files can be retrieved by accessing the back-end Tomcat server directly...

6.5CVSS5.9AI score0.00859EPSS
SaveExploits1References1
WPVulnDB
WPVulnDB
added 2022/11/10 12:00 a.m.20 views

S2W - Import Shopify to WooCommerce < 1.1.13 - Admin+ Arbitrary File Access

The plugin does not validate files to be accessed, which could allow high privilege users such as admin to read arbitrary files from the server...

4.9CVSS4.1AI score0.00707EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/07 12:00 a.m.17 views

The vulnerability of the command-line interface (CLI) of microprogramming software for Cisco TelePresence Collaboration Endpoint conference call control devices and Cisco RoomOS operating systems allows a hacker to re-record arbitrary files.

The vulnerability of the command-line interface CLI of microprogramming software for Cisco TelePresence Collaboration Endpoint conference call controllers and Cisco RoomOS operating systems is related to errors in processing symbolic links. Exploiting this vulnerability could allow an attacker to...

4.6CVSS7.2AI score0.0044EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/11/04 12:00 p.m.69 views

GHSA-QQHF-XFHW-7884 Markdownify has Files or Directories Accessible to External Parties

Markdownify version 1.4.1 allows an external attacker to remotely obtain arbitrary local files on any client that attempts to view a malicious markdown file through Markdownify. This is possible because the application does not have a CSP policy or at least not strict enough and/or does not...

5.5CVSS5.3AI score0.00376EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/11/03 12:00 a.m.11 views

CandidATS 代码问题漏洞

CandidATS is a free and open source recruiter tracking system from CandidATS India. A security vulnerability exists in CandidATS version 3.0.0. An attacker exploited the vulnerability to read arbitrary files from the server...

7.5CVSS7.5AI score0.00861EPSS
SaveExploits1References3
CVE
CVE
added 2022/11/03 12:00 a.m.74 views

CVE-2022-41710

Markdownify 1.4.1 is vulnerable to information disclosure: when a client renders a malicious markdown file, an external attacker can read arbitrary local files. The root cause cited across multiple connected sources is an inadequate security posture for rendering content—specifically, the lack of...

5.5CVSS5.3AI score0.00376EPSS
SaveExploits1References2Affected Software1
WPVulnDB
WPVulnDB
added 2022/10/31 12:00 a.m.23 views

WP User Frontend < 3.5.29 - Obscure Registration as Admin

The plugin uses a user supplied argument called urhidden in its registration form, which contains the role for the account to be created with, encrypted via wpufencryption. This could allow an attacker having access to the AUTHKEY and AUTHSALT constant via an arbitrary file access issue for...

9.8CVSS1.2AI score0.00652EPSS
SaveExploits2Affected Software1
CNNVD
CNNVD
added 2022/10/25 12:00 a.m.14 views

Synology DiskStation Manager 访问控制错误漏洞

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology, a Chinese company. The operating system manages data, files, photos, music and other information. A security vulnerability exists in Synology DiskStation Manager DSM versions prior to...

9.1CVSS8.5AI score0.00803EPSS
SaveExploits0References3
WPVulnDB
WPVulnDB
added 2022/10/20 12:00 a.m.29 views

Welcart eCommerce < 2.7.8 - Unauthenticated Arbitrary File Access

The plugin does not validate user input used in a path, which could allow unauthenticated users to read arbitrary files via a traversal attack...

9.8CVSS5AI score0.05212EPSS
SaveExploits2Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/19 12:00 a.m.12 views

PT-2022-26913 · Compuware +1 · Jenkins Compuware Topaz For Total Test Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Compuware Topaz for Total Test Plugin versions 2.4.8 and earlier Description: The issue allows attackers who can control agent processes to read arbitrary files on the Jenkins controller file system due to an agent/controller message...

7.5CVSS7.5AI score0.0064EPSS
SaveExploits0References5
OSV
OSV
added 2022/10/14 5:15 p.m.14 views

CVE-2021-22685

An attacker may be able to use minify route with a relative path to view any file on the Cassia Networks Access Controller prior to 2.0.1...

7.5CVSS5.8AI score0.00627EPSS
SaveExploits0References2
CNVD
CNVD
added 2022/10/11 12:00 a.m.60 views

Heartex Label Studio Server-Side Request Forgery Vulnerability

Label Studio is an open source data labeling tool from Heartex. Heartex Label Studio Community Edition 1.5.0 and previous versions contain a server-side request forgery vulnerability that stems from a failure to properly validate user input in the data import module, which could be exploited by a...

6.5CVSS2.4AI score0.05564EPSS
SaveExploits3References1
Rows per page
Query Builder