Lucene search
K

50 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:42 a.m.5 views

CVE-1999-0296

Solaris volrmmount program allows attackers to read any file...

7.2CVSS6.8AI score0.00067EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-25191

Malware in sbrugna...

7.8CVSS7.5AI score0.00374EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2000-0900

Malware in sbrugna...

5CVSS6.4AI score0.08157EPSS
Exploits0References22
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2005-4197

Malware in sbrugna...

5CVSS6.4AI score0.04041EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2017-15690

Malware in sbrugna...

6.5CVSS6.5AI score0.03768EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2025-12226

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00425EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-2330

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.0027EPSS
Exploits0References3
NVD
NVD
added 2025/07/17 8:15 p.m.4 views

CVE-2025-53964

GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary...

9.6CVSS0.00339EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2025/06/05 12:0 a.m.4 views

Nazgul Nostromo nhttpd < 2.1 Path Traversal Vulnerability

Nazgul Nostromo nhttpd is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.8CVSS6.9AI score0.33533EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/05/23 7:4 a.m.10 views

CVE-2024-46664

A relative path traversal in Fortinet FortiRecorder CWE-23 version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to read files from the underlying filesystem via crafted HTTP or HTTPs requests...

5.5CVSS6.7AI score0.00526EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:7 p.m.4 views

CVE-2020-8803

SuiteCRM through 7.11.11 allows Directory Traversal to include arbitrary .php files within the webroot via addtoprospectlist...

9.8CVSS6.9AI score0.0096EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:40 p.m.5 views

CVE-2005-4622

Directory traversal vulnerability in eFileGo 3.01 allows remote attackers to execute arbitrary code, read arbitrary files, and upload arbitrary files via a ... triple dot in 1 the URL on port 608 and 2 the argument to upload.exe...

7.5CVSS7.8AI score0.07296EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/03/28 8:18 a.m.7 views

CVE-2025-27716

Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in the file/folder listing process of the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and earlier. If this vulnerability is exploited, the product's files may be obtained and/or altered...

6.5CVSS7AI score0.00879EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2025/03/20 12:32 p.m.10 views

AgentScope Path Traversal in /api/file

A path traversal vulnerability exists in modelscope/agentscope version v.0.0.4. The API endpoint /api/file does not properly sanitize the path parameter, allowing an attacker to read arbitrary files on the server...

7.5CVSS6.8AI score0.0039EPSS
Exploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2025/03/10 10:19 p.m.12 views

Local File Inclusion in Rack::Static

Summary Rack::Static can serve files under the specified root: even if urls: are provided, which may expose other files under the specified root: unexpectedly. Details The vulnerability occurs because Rack::Static does not properly sanitize user-supplied paths before serving files. Specifically,...

7.5CVSS7.2AI score0.01354EPSS
Exploits0References6Affected Software1
CNVD
CNVD
added 2025/03/07 12:0 a.m.7 views

Esri ArcGIS Server Path Traversal Vulnerability

Esri ArcGIS Server is Esri's Web-oriented enterprise software platform for providing geolocation services. A path traversal vulnerability exists in Esri ArcGIS Server versions 10.9.1 through 11.3, which stems from the program failing to properly filter for special elements in the path of a resour...

4.9CVSS6.5AI score0.00138EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2016-9379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub- using guest OS administrators to read or delete...

7.9CVSS7.3AI score0.00101EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/01/31 5:46 p.m.4 views

CVE-2023-5390

An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC. This exploit could be used to read files from the controller that may expose limited information from the device. Honeywell recommends...

5.3CVSS6.7AI score0.00155EPSS
Exploits0References2
CVE
CVE
added 2022/06/13 4:11 p.m.69 views

CVE-2022-23167

CVE-2022-23167 affects Amodat Mobile Application Gateway. The issue is a Local File Inclusion (LFI) in the web endpoint implemented as /mobile/downloadfile.aspx?Filename=../.. /windows/boot.ini, reachable unauthenticated. This allows an attacker to read sensitive files on the host. Public materia...

9.8CVSS7.3AI score0.00129EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2021/07/08 12:0 a.m.6 views

QSAN Storage Manager Path Traversal Vulnerability (CNVD-2021-48976)

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. A path traversal vulnerability exists in FileStreaming in QSAN Storage Manager 3.3.1 and earlier versions. An attacker can exploit this vulnerability by injecting symbolic links to access arbitrary files...

6.5CVSS6.8AI score0.00208EPSS
Exploits0References1
Rows per page
Query Builder