3778 matches found
CVE-2018-12976
In Go Doc Dot Org gddo through 2018-06-27, an attacker could use specially crafted tags in packages being fetched by gddo to cause a directory traversal and remote code execution...
CVE-2018-12976
In Go Doc Dot Org gddo through 2018-06-27, an attacker could use specially crafted tags in packages being fetched by gddo to cause a directory traversal and remote code execution...
CVE-2018-12976
The CVE-2018-12976 vulnerability affects Go Doc Dot Org (gddo). An attacker could exploit specially crafted tags in packages fetched by gddo to trigger a directory traversal and remote code execution. This is due to the handling of go-import metadata in gddo’s fetch process. Impact is remote cod...
CVE-2018-12976
In Go Doc Dot Org gddo through 2018-06-27, an attacker could use specially crafted tags in packages being fetched by gddo to cause a directory traversal and remote code execution...
CVE-2018-12976: Improper Limitation of a Pathname to a Restricted Directory
In Go Doc Dot Org gddo through 2018-06-27, an attacker could use specially crafted tags in packages being fetched by gddo to cause a directory traversal and remote code execution...
DEBIAN-CVE-2018-13054
An issue was discovered in Cinnamon 1.9.2 through 3.8.6. The cinnamon-settings-users.py GUI runs as root and allows configuration of for example other users' icon files in onfacebrowsemenuitemactivated and onfacemenuitemactivated. These icon files are written to the respective user's $HOME/.face...
goserv directory traversal vulnerability
goserv is an HTTP server. A directory traversal vulnerability exists in goserv. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...
lab6.brit95 Path Traversal Vulnerability
lab6.brit95 is a file server. A path traversal vulnerability exists in lab6.brit95. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...
Galaxy CMS Cross-Site Scripting Vulnerability
Galaxy CMS is a lightweight, fast-response request content management system based on the .NET Framework and a SQL Server database. A cross-site scripting vulnerability exists in Galaxy CMS, which could be exploited by an attacker to execute arbitrary script code in the browser of a user in the...
f2e-server path traversal vulnerability
f2e-server is an HTTP server based on the Node.js platform . A path traversal vulnerability exists in f2e-server version 1.12.11 and earlier. An attacker can exploit this vulnerability by placing a '... /' sequence into a URL to gain access to the file system...
gomeplus-h5-proxy path traversal vulnerability
gomeplus-h5-proxy is a module that can provide CDN resource proxies. A path traversal vulnerability exists in gomeplus-h5-proxy. An attacker can exploit this vulnerability by placing a '... /' sequence into a URL to access arbitrary files on the system...
peiserver directory traversal vulnerability
peiserver is a static file server. A directory traversal vulnerability exists in peiserver. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...
Fast-http-cli Directory Traversal Vulnerability
fast-http-cli is a command-line based HTTP server. A directory traversal vulnerability exists in fast-http-cli. An attacker can exploit this vulnerability by placing a '. /' sequence in a URL to gain access to the file system...
mfrs directory traversal vulnerability
mfrs is a static file server. A directory traversal vulnerability exists in mfrs. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...
intsol-package directory traversal vulnerability
intsol-package is a file server. A directory traversal vulnerability exists in intsol-package. An attacker can exploit this vulnerability by placing ". /" in a URL to access the file system...
uekw1511server Directory Traversal Vulnerability
uekw1511server is a static file server. A directory traversal vulnerability exists in uekw1511server. An attacker can exploit this vulnerability by placing a '... /' sequence in a URL to gain access to the file system...
CVE-2017-16147
shit-server is a file server. shit-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
CVE-2017-16150
wanggoujing123 is a simple webserver. wanggoujing123 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
yzt directory traversal vulnerability
yzt is a simple file server. Yzt suffers from a directory traversal vulnerability. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...
CVE-2018-1039
A security feature bypass vulnerability exists in .Net Framework which could allow an attacker to bypass Device Guard, aka ".NET Framework Device Guard Security Feature Bypass Vulnerability." This affects Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5,...