Lucene search
+L

6982 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 8:34 a.m.11 views

CVE-2024-41971

A low privileged remote attacker can overwrite an arbitrary file on the filesystem leading to a DoS and data loss...

8.1CVSS7.1AI score0.00605EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/08 2:15 a.m.5 views

CVE-2019-25295

The WP Cost Estimation plugin for WordPress is vulnerable to Upload Directory Traversal in versions before 9.660 via the uploadFormFiles function. This allows attackers to overwrite any file with a whitelisted type on an affected site...

6.5CVSS0.00528EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/08 1:50 a.m.20 views

CVE-2019-25295

CVE-2019-25295 affects the WP Cost Estimation plugin for WordPress. Versions prior to 9.660 are vulnerable to a directory traversal in the uploadFormFiles function, allowing an attacker to overwrite any file with a whitelisted type on the site. This results in potential partial impact to integrit...

6.5CVSS6.1AI score0.00528EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/08 1:50 a.m.3 views

CVE-2019-25295 WP Cost Estimation < 9.660 - Upload Directory Traversal

The WP Cost Estimation plugin for WordPress is vulnerable to Upload Directory Traversal in versions before 9.660 via the uploadFormFiles function. This allows attackers to overwrite any file with a whitelisted type on an affected site...

6.5CVSS6.1AI score0.00528EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/01/08 1:50 a.m.30 views

CVE-2019-25295 WP Cost Estimation < 9.660 - Upload Directory Traversal

The WP Cost Estimation plugin for WordPress is vulnerable to Upload Directory Traversal in versions before 9.660 via the uploadFormFiles function. This allows attackers to overwrite any file with a whitelisted type on an affected site...

6.5CVSS0.00528EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.5 views

WordPress plugin WP Cost Estimation 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A path traversal...

6.5CVSS6.9AI score0.00528EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/07 9:43 a.m.11 views

CVE-1999-0133

fmfls license server for Adobe Framemaker allows local users to overwrite arbitrary files and gain root access...

2.1CVSS7AI score0.00608EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:42 a.m.11 views

CVE-1999-0081

wu-ftp allows files to be overwritten via the rnfr command...

5CVSS6.8AI score0.01581EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:40 a.m.10 views

CVE-1999-0730

The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack...

10CVSS6.6AI score0.04472EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:40 a.m.8 views

CVE-1999-0424

talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes...

2.1CVSS6.8AI score0.00377EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:31 a.m.11 views

CVE-2019-16155

A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to overwrite system files as root with arbitrary content through system backup file via specially crafted "BackupConfig" type IPC client requests to the fctsched process. Further more...

7.1CVSS7.3AI score0.00443EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:26 a.m.7 views

CVE-2019-12571

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v0.9.8 beta build 02099 for macOS could allow an authenticated, local attacker to overwrite arbitrary files. When the client initiates a connection, the XML /tmp/pia-watcher.plist file is created. If the file exists,...

7.1CVSS6.8AI score0.00643EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
added 2026/01/06 12:24 a.m.6 views

SUSE CVE-2025-67488

SiYuan is self-hosted, open source personal knowledge management software. Versions 0.0.0-20251202123337-6ef83b42c7ce and below contain function importZipMd which is vulnerable to ZipSlips, allowing an authenticated user to overwrite files on the system. An authenticated user with access to the...

8.8CVSS7.7AI score0.00374EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.12 views

PT-2026-20979

Name of the Vulnerable Software and Affected Versions libssh versions prior to 0.11.4-1.1 Description A denial of service condition can occur due to a malformed SFTP message. Recommendations Update to version 0.11.4-1.1 or later...

10CVSS6.2AI score0.00582EPSS
SaveExploits0References108
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.7 views

PT-2026-20975

Name of the Vulnerable Software and Affected Versions libssh affected versions not specified Description The software contains an issue related to improper sanitation of paths received from SCP servers. This could potentially lead to security consequences. Recommendations At the moment, there is ...

8.2CVSS6.2AI score0.00582EPSS
SaveExploits0References110
OpenVAS
OpenVAS
added 2025/12/31 12:0 a.m.6 views

Slackware: Security Advisory (SSA:2025-364-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8AI score
SaveExploits0References2
Slackware Linux
Slackware Linux
added 2025/12/30 11:58 p.m.10 views

[slackware-security] wget2

New wget2 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/wget2-2.2.1-i586-1slack15.0.txz: Upgraded. This update fixes bugs and the following security issues: Fix file overwrite issue with...

7.5AI score
SaveExploits0
EUVD
EUVD
added 2025/12/25 12:30 a.m.6 views

EUVD-2025-205357

C-Kermit aka ckermit through 10.0 Beta.12 aka 416-beta12 before 244644d allows a remote Kermit system to overwrite files on the local system, or retrieve arbitrary files from the local system...

8.9CVSS6.3AI score0.00379EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/12/25 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-68920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - C-Kermit aka ckermit through 10.0 Beta.12 aka 416-beta12 before 244644d allows a remote Kermit system to overwrite files on the local system, or retrieve...

8.9CVSS7.2AI score0.00379EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2025/12/24 10:15 p.m.5 views

CVE-2025-68920

C-Kermit aka ckermit through 10.0 Beta.12 aka 416-beta12 before 244644d allows a remote Kermit system to overwrite files on the local system, or retrieve arbitrary files from the local system...

8.9CVSS6AI score0.00379EPSS
SaveExploits0References5
Rows per page
Query Builder