Lucene search
+L

7320 matches found

Github Security Blog
Github Security Blog
added 2024/11/04 6:31 p.m.20 views

hornetq vulnerable to file overwrite, sensitive information disclosure

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...

9.1CVSS6.7AI score0.00671EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2024/11/04 6:31 p.m.45 views

GHSA-R7MV-MV7M-PJW3 hornetq vulnerable to file overwrite, sensitive information disclosure

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...

9.3CVSS6.7AI score0.00671EPSS
SaveExploits1References5
NVD
NVD
added 2024/11/04 6:15 p.m.21 views

CVE-2024-51127

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...

9.1CVSS0.00671EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/11/04 12:00 a.m.7 views

HornetQ 安全漏洞

HornetQ is an open source project from HornetQ Open Source for building multi-protocol, embeddable, very high performance clustered asynchronous messaging systems. A security vulnerability exists in HornetQ version v2.4.9, which stems from the createTempFile function allowing an attacker to...

9.1CVSS6.7AI score0.00671EPSS
SaveExploits1References3
CVE
CVE
added 2024/11/04 12:00 a.m.132 views

CVE-2024-51127

CVE-2024-51127 affects hornetq-core-client in Red Hat JBoss EAP 7.x. The flaw in HornetQ’s createTempFile path allows arbitrary file overwrite or access to sensitive information. Red Hat advisories RHSA-2025:16668, RHSA-2025:16667 and RHSA-2025:3467 indicate this issue is addressed in EAP 7.1.12,...

9.1CVSS6.8AI score0.00671EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/04 12:00 a.m.8 views

PT-2024-34531 · Hornetq · Hornetq

Name of the Vulnerable Software and Affected Versions: hornetq version 2.4.9 Description: An issue in the createTempFile method allows attackers to arbitrarily overwrite files or access sensitive information. Recommendations: For hornetq version 2.4.9, consider disabling the createTempFile method...

9.1CVSS6.7AI score0.00671EPSS
SaveExploits1References10
Cvelist
Cvelist
added 2024/11/04 12:00 a.m.105 views

CVE-2024-51127

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...

0.00671EPSS
SaveExploits1References1
OSV
OSV
added 2024/11/04 12:00 a.m.54 views

CVE-2024-51127

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...

9.1CVSS7AI score
SaveExploits0References3
OSV
OSV
added 2024/10/29 3:32 p.m.4 views

GHSA-HC5W-C9F8-9CC4 Langchain Path Traversal vulnerability

A path traversal vulnerability exists in the getFullPath method of langchain-ai/langchainjs version 0.2.5. This vulnerability allows attackers to save files anywhere in the filesystem, overwrite existing text files, read .txt files, and delete files. The vulnerability is exploited through the...

6.9CVSS6.8AI score0.00552EPSS
SaveExploits1References5
NVD
NVD
added 2024/10/29 1:15 p.m.24 views

CVE-2024-5823

A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions = 20240410. This vulnerability allows an attacker to gain unauthorized access to overwrite critical configuration files within the system. Exploiting this vulnerability can lead to unauthorized changes in system behavior...

9.1CVSS0.0055EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/10/29 12:48 p.m.34 views

CVE-2024-5823 File Overwrite Vulnerability in gaizhenbiao/chuanhuchatgpt

A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions = 20240410. This vulnerability allows an attacker to gain unauthorized access to overwrite critical configuration files within the system. Exploiting this vulnerability can lead to unauthorized changes in system behavior...

6.5CVSS0.0055EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/10/29 12:48 p.m.15 views

CVE-2024-5823 File Overwrite Vulnerability in gaizhenbiao/chuanhuchatgpt

A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions = 20240410. This vulnerability allows an attacker to gain unauthorized access to overwrite critical configuration files within the system. Exploiting this vulnerability can lead to unauthorized changes in system behavior...

6.5CVSS7.3AI score0.0055EPSS
SaveExploits1References2
CVE
CVE
added 2024/10/29 12:48 p.m.73 views

CVE-2024-5823

A CVE-2024-5823 entry concerns a file overwrite vulnerability in gaizhenbiao/chuanhuchatgpt versions <= 20240410. The root cause: an insecure file handling path enables an attacker to overwrite critical configuration files, which can lead to unauthorized changes in system behavior or security ...

9.1CVSS7.1AI score0.0055EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2024/10/29 12:48 p.m.21 views

CVE-2024-5823 File Overwrite Vulnerability in gaizhenbiao/chuanhuchatgpt

A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions = 20240410. This vulnerability allows an attacker to gain unauthorized access to overwrite critical configuration files within the system. Exploiting this vulnerability can lead to unauthorized changes in system behavior...

6.5CVSS6.6AI score
SaveExploits0References4
CNNVD
CNNVD
added 2024/10/29 12:00 a.m.9 views

ChuanhuChatGPT 安全漏洞

ChuanhuChatGPT is an application by the individual developer Chuan Hu. It provides a fast and easy-to-use web graphical interface and many additional features for many LLMs such as ChatGPT. A security vulnerability exists in ChuanhuChatGPT 20240410 and prior versions, which stems from the presenc...

9.1CVSS6.7AI score0.0055EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/10/29 12:00 a.m.12 views

PT-2024-37185 · Unknown · Gaizhenbiao/Chuanhuchatgpt

Name of the Vulnerable Software and Affected Versions: gaizhenbiao/chuanhuchatgpt versions = 20240410 Description: A file overwrite issue exists, allowing unauthorized access to overwrite critical configuration files. This can lead to unauthorized changes in system behavior or security settings...

9.1CVSS6.8AI score0.0055EPSS
SaveExploits1References5
NVD
NVD
added 2024/10/22 7:15 p.m.17 views

CVE-2024-41183

Trend Micro VPN, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite under specific conditions that can lead to elevation of privileges...

7.8CVSS0.01013EPSS
SaveExploits0References3
OSV
OSV
added 2024/10/22 7:15 p.m.7 views

CVE-2024-41183

Trend Micro VPN, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite under specific conditions that can lead to elevation of privileges...

7.8CVSS5.9AI score0.01013EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/10/22 6:26 p.m.20 views

CVE-2024-41183

Trend Micro VPN, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite under specific conditions that can lead to elevation of privileges...

7.8CVSS7AI score0.01013EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/10/22 6:26 p.m.35 views

CVE-2024-41183

Trend Micro VPN, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite under specific conditions that can lead to elevation of privileges...

7.8CVSS0.01013EPSS
SaveExploits0References3
Rows per page
Query Builder