29138 matches found
WBSAirback 路径遍历漏洞
WBSAirback is a next generation storage and backup system from WBSAirback. A path traversal vulnerability exists in WBSAirback version 21.02.04, which can be exploited by a low-privileged attacker to download files from the system...
The vulnerability of microprogramming software in Cisco Aironet Access Points of models 1540, 1560, 1800, 2800, 3800, 4800, Catalyst 9105AX, Catalyst 9115, Catalyst 9120AX, Catalyst 9124AX, Catalyst 9130AX, and Catalyst 9136 allows attackers to bypass security restrictions, execute arbitrary commands, and download modified versions of the software.
The vulnerability of microprogrammed software on Cisco Aironet Access Points of models 1540, 1560, 1800, 2800, 3800, 4800, Catalyst 9105AX, Catalyst 9115, Catalyst 9120AX, Catalyst 9124AX, Catalyst 9130AX, and Catalyst 9136 is related to the exploitation of trusted boundaries. Exploiting this...
WordPress WP File Download Light Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)
Software WP File Download Light Type Plugin Vulnerable versions = 1.3.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32539 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 746ee966342b Credits Yudistira Arya Required privilege...
CVE-2024-28878 IOSIX IO-1020 Micro ELD Download of Code Without Integrity Check
IO-1020 Micro ELD downloads source code or an executable from an adjacent location and executes the code without sufficiently verifying the origin or integrity of the code...
WordPress Download Manager plugin <= 3.2.82 - File Password Lock Bypass vulnerability
File Password Lock Bypass vulnerability discovered by Liu Shaohong Patchstack Alliance in WordPress Plugin Download Manager versions = 3.2.82...
WordPress Download Manager Plugin <= 3.2.82 is vulnerable to Bypass Vulnerability
Software Download Manager Type Plugin Vulnerable versions = 3.2.82 Fixed in 3.2.83 OWASP Top 10 A1: Broken Access Control Classification Bypass Vulnerability CVE CVE-2024-32131 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID d970a3e505ee Credits Liu Shaohong Required...
IO-1020 Micro ELD 安全漏洞
The IOSiX IO-1020 Micro ELD is an electronic logging device from IOSiX USA. A security vulnerability exists in versions prior to the IO-1020 Micro ELD 360 that originates from the ability to download source code or executable files from an adjacent location without sufficiently verifying the orig...
CVE-2024-31342 WordPress Gallery Exporter plugin <= 1.3 - Arbitrary File Download vulnerability
Missing Authorization vulnerability in WPcloudgallery WordPress Gallery Exporter.This issue affects WordPress Gallery Exporter: from n/a through 1.3...
CVE-2024-31342 WordPress Gallery Exporter plugin <= 1.3 - Arbitrary File Download vulnerability
Missing Authorization vulnerability in WPcloudgallery WordPress Gallery Exporter.This issue affects WordPress Gallery Exporter: from n/a through 1.3...
CVE-2024-31343 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10.1 - Arbitrary File Download vulnerability
Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 4.10.1...
CVE-2024-31343 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10.1 - Arbitrary File Download vulnerability
Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 4.10.1...
WordPress Gallery Exporter <= 1.3 - Authenticated (Administrator+) Arbitrary File Download
Description The WordPress Gallery Exporter – Export your NextGen, Envira and FooGallery galleries to your computer plugin for WordPress is vulnerable to arbitrary file downloads in all versions up to, and including, 1.3. This is due to the plugin improperly validating the path to requested file...
MP3 Audio Player for Music, Radio & Podcast by Sonaar < 5.0 - Unauthenticated Arbitrary File Download
Description The MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin for WordPress is vulnerable to arbitrary file downloads due to insufficient file validation on the loadlyricsajaxcallback function in all versions up to, and including, 4.10.1. This makes it possible for unauthenticated...
CVE-2024-31978
A vulnerability has been identified in SINEC NMS All versions V2.0 SP2. Affected devices allow authenticated users to export monitoring data. The corresponding API endpoint is susceptible to path traversal and could allow an authenticated attacker to download files from the file system. Under...
CVE-2024-31978
The CVE-2024-31978 issue affects Siemens SINEC NMS (all versions prior to 2.0 SP2). Authentication is required to access the vulnerable API endpoint, which is susceptible to path traversal and could allow an authenticated attacker to download files from the file system; in some cases, downloaded ...
CVE-2024-31978
A vulnerability has been identified in SINEC NMS All versions V2.0 SP2. Affected devices allow authenticated users to export monitoring data. The corresponding API endpoint is susceptible to path traversal and could allow an authenticated attacker to download files from the file system. Under...
.NET 6.0 Update - April 09, 2024 (KB5037336)
None None...
Description of the security update for SharePoint Server 2019: April 9, 2024 (KB5002580)
None None...