Lucene search
+L

140 matches found

ATTACKERKB
ATTACKERKB
added 2026/03/21 3:30 p.m.11 views

CVE-2019-25582

i-doit CMDB 1.12 contains an arbitrary file download vulnerability that allows authenticated attackers to download sensitive files by manipulating the file parameter in index.php. Attackers can send GET requests to index.php with filemanager=image and supply arbitrary file paths like...

7.1CVSS5.9AI score0.00368EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2026/03/21 3:30 p.m.37 views

CVE-2019-25582 i-doit CMDB 1.12 Arbitrary File Download via file_manager Parameter

i-doit CMDB 1.12 contains an arbitrary file download vulnerability that allows authenticated attackers to download sensitive files by manipulating the file parameter in index.php. Attackers can send GET requests to index.php with filemanager=image and supply arbitrary file paths like...

7.1CVSS0.00368EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2026/03/21 12:0 a.m.13 views

i-doit CMDB 代码问题漏洞

i-doit CMDB is a product of the German company i-doit. There is a code vulnerability in i-doit CMDB version 1.12. This vulnerability stems from the use of the file parameter, which allows arbitrary file downloads, potentially enabling authenticated attackers to download sensitive files...

7.1CVSS6AI score0.00368EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/03/21 12:0 a.m.14 views

PT-2026-26929

i-doit CMDB 1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the objGroupID parameter. Attackers can send GET requests with crafted SQL payloads in the objGroupID parameter to extract sensitive...

8.8CVSS6.2AI score0.00351EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/02/03 12:0 a.m.13 views

i-doit Open Source CMDB 安全漏洞

i-doit Open Source CMDB is a configuration management database system developed by the German company i-doit. Version 1.14.1 of i-doit Open Source CMDB contains a security vulnerability. This vulnerability stems from a file deletion vulnerability in the deleteimport parameter of the import module...

8.8CVSS5.8AI score0.00325EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2013-1451

Malware in sbrugna...

4.3CVSS6.4AI score0.01161EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2020-6039

Malware in sbrugna...

6.1CVSS6.3AI score0.00806EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2014-1673

Malware in sbrugna...

7.5CVSS6.4AI score0.01471EPSS
SaveExploits3References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2021-26495

Malware in sbrugna...

5.4CVSS5.5AI score0.01221EPSS
SaveExploits3References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2014-1315

Malware in sbrugna...

4.3CVSS6.4AI score0.01733EPSS
SaveExploits1References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2020-6040

Malware in sbrugna...

8.8CVSS8.6AI score0.01499EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2014-2271

Malware in sbrugna...

4.3CVSS6.4AI score0.00939EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2019-16519

Malware in sbrugna...

6.1CVSS6.2AI score0.02518EPSS
SaveExploits4References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2023-38871

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00651EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2023-41632

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.01191EPSS
SaveExploits2References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2023-50265

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00517EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2023-41616

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.01115EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/05/23 4:5 a.m.16 views

CVE-2023-37739

i-doit Pro v25 and below was discovered to be vulnerable to path traversal...

6.5CVSS7.2AI score0.01115EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 3:29 a.m.11 views

CVE-2023-37755

i-doit pro 25 and below and I-doit open 25 and below are configured with insecure default administrator credentials, and there is no warning or prompt to ask users to change the default password and account name. Unauthenticated attackers can exploit this vulnerability to obtain Administrator...

9.8CVSS7.1AI score0.01094EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 3:27 a.m.12 views

CVE-2023-34830

i-doit Open v24 was discovered to contain a reflected cross-site scripting XSS vulnerability via the timeout parameter on the login page...

5.4CVSS6.2AI score0.00651EPSS
SaveExploits1
Rows per page
Query Builder