Lucene search
+L

1913 matches found

Cvelist
Cvelist
•added 2025/04/25 2:32 p.m.•36 views

CVE-2025-43016

In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session...

5.4CVSS0.00369EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/25 2:32 p.m.•10 views

CVE-2025-43016

In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session...

5.4CVSS7.4AI score0.00369EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/17 5:23 a.m.•91 views

CVE-2025-3294

CVE-2025-3294 affects the WordPress WP Editor plugin up to version 1.2.9.1. The issue is an authenticated directory-traversal flaw (no proper file path validation) that can enable an attacker with Administrator-level access and above to overwrite arbitrary server files, potentially enabling remot...

7.2CVSS7.3AI score0.01019EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2025/04/17 12:00 a.m.•15 views

WordPress plugin WP Editor 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

7.2CVSS7.4AI score0.01019EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/13 12:00 a.m.•15 views

archives 路径遍历漏洞

archives is a cross-platform, multi-format Go library by the individual developer Matt Holt in France. A path traversal vulnerability exists in archives, which stems from a path traversal attack that could lead to arbitrary file overwrites...

8.1CVSS6AI score0.005EPSS
SaveExploits0References2
CVE
CVE
•added 2025/04/01 4:45 p.m.•119 views

CVE-2025-25041

CVE-2025-25041 affects the HPE Aruba Networking VIA Client on Windows, allowing malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM and potentially cause a DoS on Windows; Linux/Android are not affected. Connected sources note a related advisory (hpesbnw04841) and that the VIA cli...

5.5CVSS7AI score0.00137EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2025/04/01 1:06 p.m.•11 views

hornetq-core-client: Arbitrarily overwrite files or access sensitive information

A flaw was found in the createTempFile method of hornetq. Affected version of hornetq allows attackers to arbitrarily overwrite files or access sensitive information...

9.1CVSS5.7AI score0.00671EPSS
SaveExploits1References6
Apple
Apple
•added 2025/03/31 12:00 a.m.•5259 views

About the security content of Xcode 16.3

About the security content of Xcode 16.3 This document describes the security content of Xcode 16.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

5.8AI score0.00259EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•11 views

Apple Xcode 缓冲区错误漏洞

Apple Xcode is an integrated development environment developed by Apple Inc. Apple Xcode suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to cause an application to overwrite arbitrary files...

5.5CVSS6.7AI score0.0023EPSS
SaveExploits0References3
Veracode
Veracode
•added 2025/03/28 2:36 a.m.•24 views

Arbitrary File Overwrite

ai.h2o, h2o-core is vulnerable to Arbitrary File Overwrite. The vulnerability is due to a lack of export location restrictions in the model export endpoint, allowing an attacker to overwrite arbitrary files on the server...

7.1CVSS7AI score0.0076EPSS
SaveExploits1References4Affected Software2
Veracode
Veracode
•added 2025/03/26 11:21 a.m.•25 views

Arbitrary File Overwrite

H2O-3 is vulnerable to Arbitrary File Overwrite. The vulnerability is due to improper input validation due to the exportModelDetails function in ModelsHandler.java allowing user-controlled input in the mexport.dir parameter, enabling overwriting files at arbitrary locations on the host system...

8.2CVSS7.2AI score0.00546EPSS
SaveExploits1References4Affected Software2
RedhatCVE
RedhatCVE
•added 2025/03/22 12:31 p.m.•14 views

CVE-2024-7957

An arbitrary file overwrite vulnerability exists in the ZulipConnector of danswer-ai/danswer, affecting the latest version. The vulnerability arises from the loadcredentials method, where user-controlled input for realmname and zuliprccontent is used to construct file paths and write file content...

9.1CVSS7AI score0.00933EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/22 11:26 a.m.•17 views

CVE-2024-8616

In h2oai/h2o-3 version 3.46.0, the /99/Models/name/json endpoint allows for arbitrary file overwrite on the target server. The vulnerability arises from the exportModelDetails function in ModelsHandler.java, where the user-controllable mexport.dir parameter is used to specify the file path for...

8.2CVSS6.9AI score0.00546EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/20 4:24 p.m.•12 views

CVE-2024-7776

A flaw was found in the ONNX framework. This vulnerability allows arbitrary file overwrite via a path traversal attack in malicious tar files. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprisi...

8.1CVSS7AI score0.01519EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2025/03/20 12:32 p.m.•35 views

H2O Vulnerable to Arbitrary File Overwrite

In h2oai/h2o-3 version 3.46.0, the /99/Models/name/json endpoint allows for arbitrary file overwrite on the target server. The vulnerability arises from the exportModelDetails function in ModelsHandler.java, where the user-controllable mexport.dir parameter is used to specify the file path for...

8.2CVSS6.9AI score0.00546EPSS
SaveExploits1References4Affected Software2
Snyk
Snyk
•added 2025/03/20 12:32 p.m.•7 views

Directory Traversal

Overview onnx is an Open Neural Network Exchange Affected versions of this package are vulnerable to Directory Traversal via the downloadmodel function. An attacker can overwrite files in the user's directory by exploiting inadequate prevention of path traversal attacks in malicious tar files...

9.1CVSS7.7AI score0.01519EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2025/03/20 12:32 p.m.•26 views

Open Neural Network Exchange (ONNX) Path Traversal Vulnerability

A vulnerability in the downloadmodel function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files i...

9.1CVSS7.2AI score0.01519EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2025/03/20 12:32 p.m.•11 views

GHSA-H36J-8VV3-CJ52 Open Neural Network Exchange (ONNX) Path Traversal Vulnerability

A vulnerability in the downloadmodel function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files i...

8.1CVSS7.6AI score0.01519EPSS
SaveExploits1References6
Snyk
Snyk
•added 2025/03/20 12:32 p.m.•18 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the endpoint for exporting models. An attacker can overwrite any file on the target server by exporting a model to any file in the server's file structure. Note: This vulnerability requires there to be a model th...

7.1CVSS7.7AI score0.0076EPSS
SaveExploits1References2
NVD
NVD
•added 2025/03/20 10:15 a.m.•20 views

CVE-2024-8616

In h2oai/h2o-3 version 3.46.0, the /99/Models/name/json endpoint allows for arbitrary file overwrite on the target server. The vulnerability arises from the exportModelDetails function in ModelsHandler.java, where the user-controllable mexport.dir parameter is used to specify the file path for...

8.2CVSS0.00546EPSS
SaveExploits1References1
Rows per page
Query Builder