Lucene search
+L

74 matches found

OSV
OSV
added 2025/04/22 6:16 p.m.6 views

CVE-2025-43946

TCPWave DDI 11.34P1C2 allows Remote Code Execution via Unrestricted File Upload combined with Path Traversal...

9.8CVSS5.9AI score0.00929EPSS
SaveExploits1References2
NVD
NVD
added 2025/04/22 6:16 p.m.22 views

CVE-2025-43946

TCPWave DDI 11.34P1C2 allows Remote Code Execution via Unrestricted File Upload combined with Path Traversal...

9.8CVSS0.00929EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/04/22 12:0 a.m.7 views

PT-2025-17578 · Tcpwave · Tcpwave Ddi

Name of the Vulnerable Software and Affected Versions: TCPWave DDI version 11.34P1C2 Description: The issue allows for Remote Code Execution via Unrestricted File Upload combined with Path Traversal. Recommendations: For TCPWave DDI version 11.34P1C2, consider restricting access to file upload...

9.8CVSS7.2AI score0.00929EPSS
SaveExploits1References10
CVE
CVE
added 2025/04/22 12:0 a.m.92 views

CVE-2025-43946

The CVE-2025-43946 entry concerns TCPWave DDI 11.34P1C2. The issue is Remote Code Execution caused by Unrestricted File Upload combined with Path Traversal, enabling an attacker to upload files and traverse directories to execute arbitrary code. CVSSv3.1 metrics indicate a NETWORK-vector, exploit...

9.8CVSS7.9AI score0.00929EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/22 12:0 a.m.6 views

CVE-2025-43946

TCPWave DDI 11.34P1C2 allows Remote Code Execution via Unrestricted File Upload combined with Path Traversal...

9.8AI score0.00929EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/04/22 12:0 a.m.19 views

CVE-2025-43946

TCPWave DDI 11.34P1C2 allows Remote Code Execution via Unrestricted File Upload combined with Path Traversal...

0.00929EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/10/22 6:28 p.m.31 views

CVE-2024-46903

A vulnerability in Trend Micro Deep Discovery Inspector DDI versions 5.8 and above could allow an attacker to disclose sensitive information affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

6.5CVSS0.01234EPSS
SaveExploits0References2
OSV
OSV
added 2024/07/17 11:15 a.m.9 views

CVE-2024-5471

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys...

9.8CVSS5.8AI score0.0247EPSS
SaveExploits0References1
NVD
NVD
added 2024/07/17 11:15 a.m.40 views

CVE-2024-5471

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys...

9.8CVSS0.0247EPSS
SaveExploits0References1
NVD
NVD
added 2024/07/17 11:15 a.m.78 views

CVE-2024-27311

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder...

8.8CVSS0.01459EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/17 10:56 a.m.15 views

CVE-2024-5471 Agent takeover

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys...

8.8CVSS6.8AI score0.0247EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/17 10:56 a.m.40 views

CVE-2024-5471 Agent takeover

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys...

8.8CVSS0.0247EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/17 10:56 a.m.64 views

CVE-2024-5471

The CVE-2024-5471 entry affects Zohocorp ManageEngine DDI Central versions 4001 and prior, with an agent takeover vulnerability caused by hard-coded sensitive keys. Public data show high to critical impact (CVE scores include 8.8–9.8 base severity; network attack vector; no user interaction in so...

9.8CVSS8.7AI score0.0247EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/17 10:52 a.m.45 views

CVE-2024-27311 Arbitrary file writing

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder...

5.5CVSS7AI score0.01459EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/17 10:52 a.m.73 views

CVE-2024-27311 Arbitrary file writing

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder...

5.5CVSS0.01459EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/17 10:52 a.m.84 views

CVE-2024-27311

CVE-2024-27311 affects Zohocorp ManageEngine DDI Central versions 4001 and prior. The issue is a directory traversal vulnerability that allows an attacker to upload new files to the server folder, effectively enabling arbitrary file writing. The PT-2024-21813 datasource confirms the vulnerable ve...

8.8CVSS6AI score0.01459EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/07/17 12:0 a.m.33 views

PT-2024-21813 · Zohocorp · Manageengine Ddi Central

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine DDI Central versions 4001 and prior Description: The issue allows a user to upload new files to the server folder due to a directory traversal vulnerability. Recommendations: For versions 4001 and prior, consider...

8.8CVSS6.9AI score0.01459EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/12/30 12:0 a.m.8 views

PT-2022-22296 · Nvidia · Nvidia Gpu Display Driver

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows affected versions not specified Description: The issue is related to a null-pointer dereference in the kernel mode layer handler for DxgkDdiEscape in the nvlddmkm.sys file, which may lead to denial of...

5.5CVSS5.1AI score0.00333EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/08/02 12:0 a.m.6 views

PT-2022-5126 · Nvidia · Nvidia Gpu Display Driver

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows affected versions not specified Description: The issue is related to a local user with basic capabilities being able to cause an out-of-bounds read in the kernel mode layer handler for DxgkDdiEscape,...

7.1CVSS6.7AI score0.00173EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2022/08/02 12:0 a.m.6 views

PT-2022-20868 · Nvidia · Nvidia Gpu Display Driver

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows affected versions not specified Description: The issue is related to a failure to properly validate data in the kernel mode layer handler for DxgkDdiEscape, which might allow an attacker with basic user...

7.8CVSS7.4AI score0.00378EPSS
SaveExploits0References7
Rows per page
Query Builder