Lucene search
+L

8002 matches found

Prion
Prion
added 2022/07/21 6:15 p.m.17 views

Design/Logic Flaw

Authenticated custom plugin role Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin = 2.20.2 at WordPress...

3.3CVSS5.2AI score0.00844EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/07/21 5:24 p.m.103 views

CVE-2022-31475

CVE-2022-31475 affects the GiveWP WordPress plugin and concerns an authenticated arbitrary file read via the export function in versions

5.5CVSS5.1AI score0.00844EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/07/21 5:24 p.m.8 views

CVE-2022-31475 WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Read via Export function vulnerability

Authenticated custom plugin role Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin = 2.20.2 at WordPress...

5.5CVSS5.4AI score0.00844EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/07/21 5:24 p.m.46 views

CVE-2022-31475 WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Read via Export function vulnerability

Authenticated custom plugin role Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin = 2.20.2 at WordPress...

5.5CVSS6.6AI score0.00844EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/07/21 12:00 a.m.11 views

WordPress plugin GiveWP 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

5.5CVSS5.5AI score0.00844EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:00 a.m.13 views

The vulnerability in the ASoft CRM system for managing customer relationships exists due to an incorrect limitation on the path name to the restricted catalog. This allows a malicious actor to read any file they desire.

The vulnerability of the ASoft CRM system for managing customer relationships exists due to an incorrect limitation on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to read arbitrary files...

7.8CVSS5.6AI score
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2022/07/19 12:00 a.m.10 views

Moodle 输入验证错误漏洞

Moodle is a free and open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment.Moodle suffers from an arbitrary file reading vulnerability, which stems from insufficient path checking and can be exploited by...

7.5CVSS5.7AI score0.49335EPSS
SaveExploits0References8
Patchstack
Patchstack
added 2022/07/18 12:00 a.m.38 views

WordPress MultiSafepay plugin for WooCommerce plugin <= 4.15.0 - Unauthenticated Arbitrary File Read vulnerability

Unauthenticated Arbitrary File Read vulnerability discovered by Brandon Roldan in WordPress MultiSafepay plugin for WooCommerce plugin versions = 4.15.0. Solution Update the WordPress MultiSafepay plugin for WooCommerce plugin to the latest available version at least 4.16.0...

7.5CVSS3.1AI score0.02599EPSS
SaveExploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/07/12 2:18 p.m.6 views

CVE-2022-31475

Authenticated custom plugin role Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin = 2.20.2 at WordPress...

5.5CVSS5.2AI score0.00844EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2022/07/12 12:00 a.m.37 views

WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Read via Export function vulnerability

Authenticated Arbitrary File Read via Export function vulnerability discovered by Rafie Muhammad aka Yeraisci Patchstack Alliance in WordPress GiveWP plugin versions = 2.20.2. Solution Update the WordPress GiveWP plugin to the latest available version at least 2.21.0...

5.5CVSS4AI score0.01988EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/07/10 12:00 a.m.33 views

FreeBSD : mat2 -- directory traversal/arbitrary file read during ZIP file processing (830855f3-ffcc-11ec-9d41-d05099c8b5a7)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 830855f3-ffcc-11ec-9d41-d05099c8b5a7 advisory. - mat2 aka metadata anonymisation toolkit before 0.13.0 allows ../ directory traversal during the ZIP...

7.5CVSS7.3AI score0.02163EPSS
SaveExploits1References3
CNVD
CNVD
added 2022/07/07 12:00 a.m.42 views

Cisco Unified Communications Manager Arbitrary File Read Vulnerability (CNVD-2022-50625)

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call processing component of a unified communications system from Cisco.Unified Communications Manager Session Unified Communications Manager Session Management Edition is the session management edition of Unified...

6.5CVSS6.3AI score0.01471EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/07 12:00 a.m.349 views

Cisco Unified Communications Manager Arbitrary File Read Vulnerability

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. An arbitrary file read...

4.3CVSS6.5AI score0.01412EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/07/06 8:31 p.m.14 views

CVE-2022-20862 Cisco Unified Communications Manager Arbitrary File Read Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of a...

4.3CVSS6.7AI score0.01412EPSS
SaveExploits0References1
Cisco
Cisco
added 2022/07/06 4:00 p.m.71 views

Cisco Unified Communications Manager Arbitrary File Read Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of a...

4.3CVSS4.6AI score0.01412EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/07/06 4:00 p.m.10 views

CVE-2022-20862

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of a...

4.3CVSS6AI score0.01412EPSS
SaveExploits0References2
Veracode
Veracode
added 2022/07/06 5:43 a.m.51 views

Arbitrary File Read

ruby-mysql is vulnerable to arbitrary file read. A malicious MySQL server can request local file content from a client without explicit authorization from the user if the filename specified by the server does not match with OPTLOADDATALOCALDIR...

6.5CVSS6.6AI score0.01158EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2022/07/06 12:00 a.m.11 views

Cisco Unified Communications Manager 路径遍历漏洞

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call processing component of a unified communications system from Cisco.Unified Communications Manager Session Unified Communications Manager Session Management Edition is the session management edition of Unified...

6.5CVSS5.9AI score0.01471EPSS
SaveExploits0References6
NVD
NVD
added 2022/06/27 9:15 p.m.32 views

CVE-2022-33116

An issue in the jmpath variable in /modules/mindmap/index.php of GUnet Open eClass Platform aka openeclass v3.12.4 and below allows attackers to read arbitrary files via a directory traversal...

6.5CVSS0.01715EPSS
SaveExploits1References4
OSV
OSV
added 2022/06/27 8:42 p.m.23 views

CVE-2022-33116

An issue in the jmpath variable in /modules/mindmap/index.php of GUnet Open eClass Platform aka openeclass v3.12.4 and below allows attackers to read arbitrary files via a directory traversal...

6.8AI score
SaveExploits0References6
Rows per page
Query Builder