Lucene search
K

24 matches found

Cvelist
Cvelist
added 2026/02/01 12:56 p.m.30 views

CVE-2022-50950 Webile 1.0.1 Directory Traversal Vulnerability via Web Application

Webile 1.0.1 contains a directory traversal vulnerability that allows remote attackers to manipulate file system paths without authentication. Attackers can exploit path manipulation to access sensitive system directories and potentially compromise the mobile device's local file system...

7.1CVSS0.01256EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2014-3024

Malware in sbrugna...

5.8CVSS6.2AI score0.00288EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2005-2219

Malware in sbrugna...

7.2CVSS6.2AI score0.00065EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/10/06 2:14 p.m.2 views

CVE-2025-10653

An unauthenticated debug port may allow access to the device file system...

8.6CVSS7AI score0.00062EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2025-32203

Malicious code in bioql PyPI...

8.6CVSS6.6AI score0.00062EPSS
Exploits0References3
NVD
NVD
added 2025/10/02 8:15 p.m.1 views

CVE-2025-10653

An unauthenticated debug port may allow access to the device file system...

8.6CVSS0.00062EPSS
Exploits0References2
CVE
CVE
added 2025/10/02 8:3 p.m.10 views

CVE-2025-10653

Technical details such as affected products/versions, root cause, and remediation are not publicly provided in the connected documents. Monitor for updates from vendors and security feeds to obtain concrete information and a confirmed fix.

8.6CVSS6.6AI score0.00062EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/02 8:3 p.m.3 views

CVE-2025-10653 Raise3D Pro2 Series 3D Printers Authentication Bypass Using an Alternate Path or Channel

An unauthenticated debug port may allow access to the device file system...

8.6CVSS0.00062EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/02 8:3 p.m.2 views

CVE-2025-10653 Raise3D Pro2 Series 3D Printers Authentication Bypass Using an Alternate Path or Channel

An unauthenticated debug port may allow access to the device file system...

8.6CVSS6.6AI score0.00062EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/02 12:0 a.m.2 views

PT-2025-40419

Name of the Vulnerable Software and Affected Versions affected versions not specified Description An unauthenticated debug port may allow access to the device file system. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

8.6CVSS6.5AI score0.00062EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/10/02 12:0 a.m.1 views

Raisecom MSG1200 安全漏洞

The Raisecom MSG1200 is a Gigabit Converged Gateway from Raisecom China. A security vulnerability exists in the Raisecom MSG1200 that stems from an unauthenticated debug port that may allow access to the device file system...

8.6CVSS6.8AI score0.00062EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/02/04 12:0 a.m.2 views

Western Telematic NPS Series、DSM Series和CPM Series 安全漏洞

Western Telematic NPS Series and others are products of Western Telematic, Inc.Western Telematic NPS Series is a series of network power switches.Western Telematic DSM Series is a series of console servers. Western Telematic CPM Series is a series of console servers. A security vulnerability exis...

6.5CVSS6.6AI score0.00145EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/23 12:0 a.m.1 views

ECOVACS robot lawnmowers 安全漏洞

ECOVACS robot lawnmowers is a series of lawnmowers from the Chinese company ECOVACS. A security vulnerability exists in ECOVACS robot lawnmowers that originates from storing the anti-theft PIN in plaintext in the device file system. An attacker could steal the lawnmower, read the PIN, and reset t...

4.8CVSS6.6AI score0.0003EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/08/09 12:0 a.m.1 views

PHOENIX CONTACTs WP 6xxx series web panels Security Vulnerability

PHOENIX CONTACTs WP 6xxx series web panels are a series of web panels from PHOENIX CONTACTs, Germany. A security vulnerability exists in PHOENIX CONTACT WP 6xxx series versions prior to 4.0.10, which originates in the web panels, where a remote attacker with low privileges can gain limited read...

4.3CVSS6.7AI score0.00097EPSS
Exploits0References2
CNVD
CNVD
added 2022/10/13 12:0 a.m.20 views

Information leakage vulnerability of multiple Siemens products

Siemens Desigo PX is a building automation control system from Siemens, a German company. The information disclosure vulnerability in several Siemens products stems from the fact that the endpoint of the "Operation" web application that interprets and executes Axon language queries allows file re...

3.8AI score0.00231EPSS
Exploits0
ATTACKERKB
ATTACKERKB
added 2022/10/11 11:15 a.m.0 views

CVE-2022-40177

A vulnerability has been identified in Desigo PXM30-1 All versions V02.20.126.11-41, Desigo PXM30.E All versions V02.20.126.11-41, Desigo PXM40-1 All versions V02.20.126.11-41, Desigo PXM40.E All versions V02.20.126.11-41, Desigo PXM50-1 All versions V02.20.126.11-41, Desigo PXM50.E All versions...

5.7CVSS6.3AI score0.00231EPSS
Exploits0References2
OSV
OSV
added 2022/10/11 11:15 a.m.1 views

CVE-2022-40177

A vulnerability has been identified in Desigo PXM30-1 All versions V02.20.126.11-41, Desigo PXM30.E All versions V02.20.126.11-41, Desigo PXM40-1 All versions V02.20.126.11-41, Desigo PXM40.E All versions V02.20.126.11-41, Desigo PXM50-1 All versions V02.20.126.11-41, Desigo PXM50.E All versions...

5.7CVSS5.8AI score0.00231EPSS
Exploits0References1
NVD
NVD
added 2014/05/02 2:55 p.m.16 views

CVE-2014-3001

The device file system aka devfs in FreeBSD 10.0 before p2 does not load default rulesets when booting, which allows context-dependent attackers to bypass intended restrictions by leveraging a jailed device node process...

5.8CVSS6.4AI score0.00288EPSS
Exploits0References3
Prion
Prion
added 2014/05/02 2:55 p.m.19 views

Design/Logic Flaw

The device file system aka devfs in FreeBSD 10.0 before p2 does not load default rulesets when booting, which allows context-dependent attackers to bypass intended restrictions by leveraging a jailed device node process...

5.8CVSS6.9AI score0.00288EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2014/05/02 2:0 p.m.17 views

CVE-2014-3001

Removed by vendor...

5.8CVSS6.7AI score0.00288EPSS
Exploits0
Rows per page
Query Builder