Lucene search
K

10 matches found

OSV
OSV
added 2024/05/03 3:15 a.m.0 views

CVE-2023-40494

LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists withi...

9.1CVSS6AI score0.39853EPSS
Exploits0References1
NVD
NVD
added 2024/05/03 3:15 a.m.8 views

CVE-2023-40494

LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists withi...

9.1CVSS8.2AI score0.39853EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2024/05/03 3:15 a.m.1 views

CVE-2023-40494

LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists withi...

9.1CVSS7.5AI score0.39853EPSS
Exploits0References2
CVE
CVE
added 2024/05/03 2:11 a.m.39 views

CVE-2023-40494

LG Simple Editor (Luckin, LG Korea) is affected by a Directory Traversal vulnerability in the deleteFolder method, due to insufficient validation of a user-supplied path. This allows remote attackers to delete arbitrary files with SYSTEM context, without authentication. Multiple sources (includin...

9.1CVSS8.2AI score0.39853EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/05/03 2:11 a.m.14 views

CVE-2023-40494 LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability

LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists withi...

8.2CVSS8.3AI score0.39853EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/08/24 12:0 a.m.2 views

PT-2023-27475 · Lg · Lg Simple Editor

Name of the Vulnerable Software and Affected Versions: LG Simple Editor affected versions not specified Description: This issue allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this issue. The specific flaw...

9.1CVSS6.8AI score0.39853EPSS
Exploits0References4
Zero Day Initiative
Zero Day Initiative
added 2023/08/24 12:0 a.m.14 views

(0Day) LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the deleteFolder method. The issue results from the lack of proper validation of a...

8.2CVSS6.6AI score0.39853EPSS
Exploits0
Packet Storm
Packet Storm
added 2018/06/06 12:0 a.m.45 views

Microsoft Windows 10 scrrun.dll Active-X Creation / Deletion Issues

Title: Windows 10 'scrrun.dll' Multiple vulnerabilities Author: Nassim Asrir Contact: [email protected] / https://www.linkedin.com/in/nassim-asrir-b73a57122/ Vendor: https://www.microsoft.com/ Test ENV: ======== Browser : IE 11 OS: Windows 10 - x64 Details: ======== scrrun.dll...

7.4AI score
Exploits0
Prion
Prion
added 2006/02/15 11:6 a.m.9 views

Design/Logic Flaw

The 1 addfolder and 2 deletefolder functions in neomail-prefs.pl in NeoMail 1.28 do not validate the Session ID, which allows remote attackers to add and delete arbitrary files, when configured with homedirfolders and homedirspools disabled...

5CVSS7.1AI score0.00649EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2006/02/15 11:0 a.m.11 views

CVE-2006-0711

The 1 addfolder and 2 deletefolder functions in neomail-prefs.pl in NeoMail 1.28 do not validate the Session ID, which allows remote attackers to add and delete arbitrary files, when configured with homedirfolders and homedirspools disabled...

6.8AI score0.00649EPSS
Exploits0References6
Rows per page
Query Builder