Lucene search
+L

27 matches found

OSV
OSV
•added 2020/10/30 2:15 p.m.•19 views

CVE-2020-4588

IBM i2 iBase 8.9.13 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting victim could result in code execution. IBM X-Force ID: 184579...

7.8CVSS7.3AI score0.01373EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/08/31 5:15 p.m.•6 views

CVE-2020-7522

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in SFAPV9601 - APC Easy UPS On-Line Software V2.0 and earlier when accessing a vulnerable method of SoundUploadServlet which may lead to uploading executable files to non-specified directories...

9.8CVSS8.6AI score0.01659EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2020/08/31 5:15 p.m.•8 views

CVE-2020-7521

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in SFAPV9601 - APC Easy UPS On-Line Software V2.0 and earlier when accessing a vulnerable method of FileUploadServlet which may lead to uploading executable files to non-specified directories...

9.8CVSS8.6AI score0.01659EPSS
SaveExploits0References3
CNVD
CNVD
•added 2020/08/11 12:00 a.m.•19 views

SecurEnvoy SecureMail Path Traversal Vulnerability

SecurEnvoy SecureMail is a secure email solution from SecurEnvoy UK. A security vulnerability exists in SecurEnvoy SecurMail version 9.3.503. The vulnerability can be exploited by an attacker to upload executable files and execute operating system commands with the help of a specially crafted...

9.3CVSS7.3AI score0.03507EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2020/01/31 11:15 p.m.•11 views

CVE-2014-2025

Unrestricted file upload vulnerability in an unspecified third party tool in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it v...

9.8CVSS6.3AI score0.03968EPSS
SaveExploits0References5
CNVD
CNVD
•added 2015/02/28 12:00 a.m.•22 views

D-Link DCS-931L with firmware unlimited file upload vulnerability

The D-Link DCS-931L is a D-Link home wireless network camera. An unrestricted file upload vulnerability exists in the D-Link DCS-931L with firmware 1.04 earlier, which could allow a remote, authenticated user to execute arbitrary code by uploading a file with an executable file extension...

9CVSS7.8AI score0.66674EPSS
SaveExploits5References1
NVD
NVD
•added 2002/08/12 4:00 a.m.•33 views

CVE-2002-0718

Web authoring command in Microsoft Content Management Server MCMS 2001 allows attackers to authenticate and upload executable content, by modifying the upload location, aka "Program Execution via MCMS Authoring Function."...

7.5CVSS6.8AI score0.05964EPSS
SaveExploits0References3
Rows per page
Query Builder