Lucene search
+L

6726 matches found

NVD
NVD
•added 2024/07/17 11:15 a.m.•93 views

CVE-2024-27311

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder...

8.8CVSS0.01459EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/07/17 11:15 a.m.•25 views

CVE-2024-27311

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder...

8.8CVSS5.8AI score0.01459EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/17 10:52 a.m.•52 views

CVE-2024-27311 Arbitrary file writing

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder...

5.5CVSS7AI score0.01459EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/17 10:52 a.m.•88 views

CVE-2024-27311 Arbitrary file writing

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder...

5.5CVSS0.01459EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/17 12:00 a.m.•11 views

CVE-2024-27311: Unrestricted Upload of File with Dangerous Type

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder...

8.8CVSS5.8AI score0.01459EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/07/16 5:15 p.m.•18 views

CVE-2024-6326

An exposure of sensitive information vulnerability exists in the Rockwell Automation FactoryTalk® System Service. A malicious user could exploit this vulnerability by starting a back-up or restore process, which temporarily exposes private keys, passwords, pre-shared keys, and database folders wh...

5.5CVSS5.8AI score0.00176EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/16 12:00 a.m.•7 views

CVE-2024-6326: Improper Privilege Management

An exposure of sensitive information vulnerability exists in the Rockwell Automation FactoryTalk® System Service. A malicious user could exploit this vulnerability by starting a back-up or restore process, which temporarily exposes private keys, passwords, pre-shared keys, and database folders wh...

5.5CVSS6.1AI score0.00176EPSS
SaveExploits0References1
Citrix
Citrix
•added 2024/07/13 12:00 a.m.•19 views

How to Publish the Printers Folder

This article contains the steps to publish Printers folder. Publishing the Printers folder provides users with a way of changing the printing preferences of their printers, such as paper size, paper type, duplexing options, and so on. Unlike adjusting such preferences within the print dialog of a...

7.1AI score
SaveExploits0
PyPA
PyPA
•added 2024/07/10 11:15 p.m.•20 views

PYSEC-2024-317

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory C: dir. This can lead to uncontrolled resource consumption, resulting in resource exhaustion, denial of service DoS, server...

9.1CVSS7AI score0.10693EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/07/10 10:43 p.m.•26 views

CVE-2024-6037 Arbitrary Folder Creation in gaizhenbiao/chuanhuchatgpt

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory C: dir. This can lead to uncontrolled resource consumption, resulting in resource exhaustion, denial of service DoS, server...

7.5CVSS7.1AI score0.10693EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2024/07/10 10:43 p.m.•12 views

CVE-2024-6037 Arbitrary Folder Creation in gaizhenbiao/chuanhuchatgpt

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory C: dir. This can lead to uncontrolled resource consumption, resulting in resource exhaustion, denial of service DoS, server...

7.5CVSS7.2AI score
SaveExploits0References4
CVE
CVE
•added 2024/07/10 10:43 p.m.•81 views

CVE-2024-6037

The CVE-2024-6037 entry concerns gaizhenbiao/chuanhuchatgpt version 20240410. The connected documents provide concrete details: an attacker can create arbitrary folders anywhere on the server, including the root directory (for example, C: dir). This action leads to resource exhaustion and potenti...

9.1CVSS7.2AI score0.10693EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2024/07/10 10:43 p.m.•54 views

CVE-2024-6037 Arbitrary Folder Creation in gaizhenbiao/chuanhuchatgpt

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory C: dir. This can lead to uncontrolled resource consumption, resulting in resource exhaustion, denial of service DoS, server...

7.5CVSS0.10693EPSS
SaveExploits1References2
Mend
Mend
•added 2024/07/10 10:43 p.m.•10 views

CVE-2024-6037

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory C: dir. This can lead to uncontrolled resource consumption, resulting in resource exhaustion, denial of service DoS, server...

9.1CVSS0.10693EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/07/10 12:00 a.m.•24 views

PT-2024-37335 · Unknown · Gaizhenbiao/Chuanhuchatgpt

Name of the Vulnerable Software and Affected Versions: gaizhenbiao/chuanhuchatgpt version 20240410 Description: A vulnerability allows an attacker to create arbitrary folders at any location on the server, including the root directory. This can lead to uncontrolled resource consumption, resulting...

9.1CVSS7.5AI score0.10693EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/10 12:00 a.m.•11 views

CVE-2024-6037: Allocation of Resources Without Limits or Throttling

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory C: dir. This can lead to uncontrolled resource consumption, resulting in resource exhaustion, denial of service DoS, server...

9.1CVSS7.2AI score0.10693EPSS
SaveExploits1References1
NVD
NVD
•added 2024/07/04 1:15 p.m.•36 views

CVE-2024-39165

QR/demoapp/qrimage.php in Asial JpGraph Professional through 4.2.6-pro allows remote attackers to execute arbitrary code via a PHP payload in the data parameter in conjunction with a .php file name in the filename parameter. This occurs because an unnecessary QR/demoapp folder.is shipped with the...

9.8CVSS0.00806EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/07/04 12:00 a.m.•81 views

PT-2024-17274

Name of the Vulnerable Software and Affected Versions ICONICS GENESIS64 all versions Mitsubishi Electric GENESIS64 all versions Mitsubishi Electric MC Works64 all versions Description The issue allows a local attacker to execute malicious code by storing a specially crafted DLL in a specific fold...

7CVSS6.5AI score0.0026EPSS
SaveExploits0References12
CVE
CVE
•added 2024/07/04 12:00 a.m.•77 views

CVE-2024-39165

Summary: CVE-2024-39165 affects Asial JpGraph Professional up to version 4.2.6-pro. The vulnerability arises from the presence of an unnecessary QR/demoapp folder, enabling a remote attacker to execute arbitrary PHP code via a payload placed in the data parameter and a .php filename in the filena...

9.8CVSS8AI score0.00806EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/07/04 12:00 a.m.•20 views

CVE-2024-39165

QR/demoapp/qrimage.php in Asial JpGraph Professional through 4.2.6-pro allows remote attackers to execute arbitrary code via a PHP payload in the data parameter in conjunction with a .php file name in the filename parameter. This occurs because an unnecessary QR/demoapp folder.is shipped with the...

9.8CVSS8AI score0.00806EPSS
SaveExploits0References1
Rows per page
Query Builder