Lucene search
K

15 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2008-7182

Malware in sbrugna...

4.3CVSS6.4AI score0.00359EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/23 2:55 a.m.3 views

CVE-2023-1881

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.3...

7.4CVSS5.9AI score0.00261EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2024/10/31 4:5 a.m.2 views

SUSE CVE-2024-8975

Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Alloy: before 1.3.3, from 1.4.0-rc.0 through 1.4.0-rc.1...

7.8CVSS7AI score0.00098EPSS
Exploits0References6
CNNVD
CNNVD
added 2024/09/25 12:0 a.m.0 views

Grafana Alloy 安全漏洞

Grafana Alloy is an open source OpenTetry Collector distribution of Grafana Open Source. A security vulnerability exists in Grafana Alloy versions prior to 1.3.3 that stems from an unquoted search path or element vulnerability that allows elevation of privilege...

7.8CVSS7.9AI score0.00098EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2023/02/28 2:15 a.m.2 views

CVE-2023-1081

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 1.3.3...

5.7CVSS6.1AI score0.00297EPSS
Exploits0References3
OSV
OSV
added 2022/05/13 1:35 a.m.2 views

GHSA-2RPM-4X8C-PVQG Improper Limitation of a Pathname to a Restricted Directory in Zip4j

zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

6.5CVSS6AI score0.0372EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2022/03/07 12:0 a.m.1 views

PT-2022-17917 · Unknown · Abantecart

Name of the Vulnerable Software and Affected Versions: Abantecart versions prior to 1.3.3 Description: The issue allows remote authenticated administrators to execute arbitrary code by uploading an executable file. This is possible because the CatalogMedia ManagerImages settings can be changed by...

7.2CVSS7.1AI score0.07841EPSS
Exploits4References6
OSV
OSV
added 2021/01/15 7:15 p.m.1 views

CVE-2020-24639

There is a vulnerability caused by unsafe Java deserialization that allows for arbitrary command execution in a containerized environment within Airwave Glass before 1.3.3. Successful exploitation can lead to complete compromise of the underlying host operating system...

9.8CVSS7.5AI score
Exploits0References1
CNVD
CNVD
added 2020/11/23 12:0 a.m.2 views

Intel Active Management Technology Access Control Error Vulnerability

Intel Active Management Technology AMT is a set of hardware-based computer remote active management technology software from Intel Intel. An Access Control Error vulnerability exists in Intel Active Management Technology versions prior to 1.3.3, which arises from a network system or product that...

9.8CVSS7AI score0.0149EPSS
Exploits0References1
OSV
OSV
added 2018/12/21 5:51 p.m.3 views

GHSA-7X9J-7223-RG5M Improper Access Control in commons-fileupload

Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution...

9.8CVSS7.3AI score0.56432EPSS
Exploits0References26
CNVD
CNVD
added 2018/07/26 12:0 a.m.4 views

zip4j directory traversal vulnerability

zip4j is a Java-based library for compression/decompression . A directory traversal vulnerability exists in zip4j versions prior to 1.3.3. The vulnerability can be exploited to write arbitrary files with a specially crafted zip archive file with a directory traversal name...

6.5CVSS6.9AI score0.0372EPSS
Exploits1References1
OSV
OSV
added 2016/10/25 2:29 p.m.1 views

DEBIAN-CVE-2016-1000031

Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution...

9.8CVSS9.8AI score0.56432EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2016/04/29 12:0 a.m.2 views

PT-2016-5899 · Kde +2 · Libksba +2

Name of the Vulnerable Software and Affected Versions: Libksba versions prior to 1.3.3 Description: The issue arises from improper handling of decoder stack overflows in the ber-decoder.c file, allowing remote attackers to cause a denial of service abort by sending crafted BER data...

7.5CVSS7.6AI score0.01327EPSS
Exploits0References27
OSV
OSV
added 2016/01/29 7:59 p.m.0 views

UBUNTU-CVE-2015-8789

Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document...

9.6CVSS7.3AI score0.00379EPSS
Exploits0References6
NVD
NVD
added 2010/11/09 9:0 p.m.17 views

CVE-2010-3871

Cross-site scripting XSS vulnerability in blocktype/groupviews/theme/raw/groupviews.tpl in Mahara before 1.3.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information...

4.3CVSS5.6AI score0.00285EPSS
Exploits0References4
Rows per page
Query Builder