321126 matches found
FileRise <= 3.3.0 - Unauthenticated File Read
FileRise = 3.3.0 contains an unauthenticated file read vulnerability caused by a lack of access control on the /uploads directory, letting unauthenticated attackers access uploaded files directly, exploit requires knowledge or guessing of file paths. id: CVE-2026-25231 info: name: FileRise = 3.3....
XWiki Platform - SQL Injection
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an...
Zoho ManageEngine OpManger - Arbitrary File Read
Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a specially crafted request. id: CVE-2020-12116 info: name: Zoho ManageEngine OpManger - Arbitrary File Read author:...
MINI-784V-25VJ-J7RJ
Bulletin has no description...
MINI-M5C3-794H-CWC4
Bulletin has no description...
MINI-65Q8-XJQ9-HMRP
Bulletin has no description...
MINI-3GJ2-4VVX-47RW
Bulletin has no description...
MINI-R245-H43Q-Q7JP
Bulletin has no description...
MINI-XRX7-7M96-VH7X
Bulletin has no description...
MINI-WWXF-P3HP-W8W2
Bulletin has no description...
MINI-H8JM-9R6M-X44M
Bulletin has no description...
MINI-WQ6H-GX7J-J8F4
Bulletin has no description...
MINI-8R67-FP44-C6FM
Bulletin has no description...
MINI-76CG-7C3H-G6CV
Bulletin has no description...
CVE-2024-58375
OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals when users have opted into static evaluation of module sources, versions, and backend configurations. As a result, values marked as sensitive may be exposed through these configuration elements instead o...
MINI-4Q7J-8MQJ-2GFC
Bulletin has no description...
MINI-HW8H-X5HX-FC8W
Bulletin has no description...
MINI-4J74-JJQ6-QG36
Bulletin has no description...