Lucene search
+L

8015 matches found

Cvelist
Cvelist
added 2024/06/04 1:12 p.m.57 views

CVE-2024-33568 WordPress Element Pack Pro plugin < 7.19.3 - Arbitrary File Read and Phar Deserialization vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Deserialization of Untrusted Data vulnerability in BdThemes Element Pack Pro allows Path Traversal, Object Injection.This issue affects Element Pack Pro: from n/a before 7.19.3...

8.5CVSS8.4AI score0.00523EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/04 1:12 p.m.41 views

CVE-2024-33568 WordPress Element Pack Pro plugin < 7.19.3 - Arbitrary File Read and Phar Deserialization vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Deserialization of Untrusted Data vulnerability in BdThemes Element Pack Pro allows Path Traversal, Object Injection.This issue affects Element Pack Pro: from n/a before 7.19.3...

8.5CVSS7.2AI score0.00523EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/03 10:15 a.m.42 views

CVE-2024-3829

qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlink that points to a desired file on the...

9.8CVSS9.2AI score0.00909EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/06/03 10:05 a.m.23 views

CVE-2024-3829 Arbitrary File Read and Write during Snapshot Recovery in qdrant/qdrant

qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlink that points to a desired file on the...

9.8CVSS6.6AI score0.00909EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/06/03 10:05 a.m.52 views

CVE-2024-3829 Arbitrary File Read and Write during Snapshot Recovery in qdrant/qdrant

qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlink that points to a desired file on the...

9.8CVSS9.2AI score0.00909EPSS
SaveExploits1References2
OSV
OSV
added 2024/06/03 10:05 a.m.30 views

CVE-2024-3829 Arbitrary File Read and Write during Snapshot Recovery in qdrant/qdrant

qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlink that points to a desired file on the...

9.8CVSS7.3AI score
SaveExploits0References4
NVD
NVD
added 2024/05/31 6:15 p.m.19 views

CVE-2021-44534

Insufficient user input filtering leads to arbitrary file read by non-authenticated attacker, which results in sensitive information disclosure...

6.5CVSS6.2AI score0.00563EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/31 6:15 p.m.24 views

CVE-2021-44534

Insufficient user input filtering leads to arbitrary file read by non-authenticated attacker, which results in sensitive information disclosure...

8.2CVSS6.6AI score0.21514EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2024/05/31 6:15 p.m.12 views

UBUNTU-CVE-2021-44534

Insufficient user input filtering leads to arbitrary file read by non-authenticated attacker, which results in sensitive information disclosure...

6.5CVSS6.8AI score0.00563EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/05/31 5:40 p.m.17 views

CVE-2021-44534

Insufficient user input filtering leads to arbitrary file read by non-authenticated attacker, which results in sensitive information disclosure...

6.5AI score0.00563EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2024/05/28 3:47 p.m.45 views

OpenAPI Generator Online - Arbitrary File Read/Delete

Impact Attackers can exploit the vulnerability to read and delete files and folders from an arbitrary, writable directory as anyone can set the output folder when submitting the request via the outputFolder option. Patches The issue was fixed via...

8.3CVSS6.7AI score0.03592EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2024/05/28 3:47 p.m.179 views

GHSA-G3HR-P86P-593H OpenAPI Generator Online - Arbitrary File Read/Delete

Impact Attackers can exploit the vulnerability to read and delete files and folders from an arbitrary, writable directory as anyone can set the output folder when submitting the request via the outputFolder option. Patches The issue was fixed via...

8.3CVSS8AI score0.03592EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2024/05/27 4:11 p.m.19 views

CVE-2024-35219 OpenAPI Generator Online - Arbitrary File Read/Delete

OpenAPI Generator allows generation of API client libraries SDK generation, server stubs, documentation and configuration automatically given an OpenAPI Spec. Prior to version 7.6.0, attackers can exploit a path traversal vulnerability to read and delete files and folders from an arbitrary,...

8.3CVSS6.6AI score0.03592EPSS
SaveExploits0References3
CVE
CVE
added 2024/05/23 7:11 p.m.75 views

CVE-2024-5202

OpenText Dimensions RM is affected by CVE-2024-5202, with an Arbitrary File Read vulnerability where authenticated users can read files stored on the server via webservices. The available data identifies the affected product as OpenText Dimensions RM and the vulnerability as an unauthorized read ...

7.7CVSS7.5AI score0.00355EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/23 7:11 p.m.12 views

CVE-2024-5202 Dimensions RM - Arbitrary File Read

Arbitrary File Read in OpenText Dimensions RM allows authenticated users to read files stored on the server via webservices...

7.7CVSS6.7AI score0.00355EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/05/23 12:00 a.m.7 views

OpenText Dimensions RM 安全漏洞

OpenText Dimensions RM is a full-featured requirements management solution from OpenText Canada. A security vulnerability exists in OpenText Dimensions RM that stems from an arbitrary file read issue...

7.7CVSS6.8AI score0.00355EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/05/22 12:00 a.m.32 views

Fortinet FortiWeb Arbitrary file read through command line pipe (FG-IR-21-218)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-218 advisory. - An incomplete filtering of one or more instances of special elements vulnerability CWE-792 in the command line interpreter o...

5.5CVSS6AI score0.00225EPSS
SaveExploits0References2
CNVD
CNVD
added 2024/05/19 12:00 a.m.5 views

Arbitrary File Read Vulnerability in ip-guard of Guangzhou Yixin Technology Co.

ip-guard is an all-in-one endpoint security management software, covering all the functions required by enterprises to protect endpoint security, including document encryption, operation control, log audit, sensitive content identification, asset and operation and maintenance management. Ltd...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2024/05/18 12:00 a.m.9 views

Arbitrary File Read Vulnerability in Puyuan Business Integrated Management Platform of Puyuan Information Technology Co.

Puyuan Information Technology Co., Ltd. is a leading data governance and low-code technology provider and full-stack middleware leader. An arbitrary file read vulnerability exists in the Puyuan Business Integrated Management Platform of Puyuan Information Technology Company Limited, which can be...

6.9AI score
SaveExploits0
Cvelist
Cvelist
added 2024/05/17 9:40 a.m.59 views

CVE-2024-32830 WordPress buddyforms plugin <= 2.8.8- Arbitrary File Read and SSRF vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ThemeKraft BuddyForms allows Server Side Request Forgery, Relative Path Traversal.This issue affects BuddyForms: from n/a through 2.8.8...

8.6CVSS8.6AI score0.00583EPSS
SaveExploits1References1
Rows per page
Query Builder