Lucene search
+L

307 matches found

CNNVD
CNNVD
•added 2023/07/19 12:00 a.m.•22 views

Keysight Technologies N6854A Geolocation server 代码问题漏洞

Keysight Technologies N6854A Geolocation server is a geolocation server from Keysight Technologies, Inc. A security vulnerability exists in Keysight Geolocation Server v2.4.2 and prior versions, which stems from improper path validation and allows an attacker to upload a specially crafted malicio...

7.8CVSS7.3AI score0.00245EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2023/07/10 12:00 a.m.•21 views

Mageia: Security Advisory (MGASA-2023-0216)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS8.5AI score0.01893EPSS
SaveExploits0References5
NVD
NVD
•added 2023/05/30 4:15 p.m.•41 views

CVE-2023-20884

VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure...

6.1CVSS6AI score0.00348EPSS
SaveExploits0References1
OSV
OSV
•added 2023/05/30 4:15 p.m.•22 views

CVE-2023-20884

VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure...

6.1CVSS5.4AI score0.00348EPSS
SaveExploits0References1
Prion
Prion
•added 2023/05/30 4:15 p.m.•33 views

Design/Logic Flaw

VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure...

5.8CVSS5.9AI score0.00348EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2023/05/30 3:05 p.m.•54 views

CVE-2023-20884

VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect a victim to an attacker controlled domain due to improper path handling leading to sensitive information disclosure...

6.1CVSS6.2AI score0.00348EPSS
SaveExploits0References1
Veracode
Veracode
•added 2023/05/15 4:52 a.m.•28 views

Path Traversal

m.static is vulnerable to Path Traversal. The vulnerability exists due to the improper path sanitization in the requestFile parameter in the requestListener function of index.js, which allows an attacker to access files outside the expected directory through relative paths...

7.5CVSS6.8AI score0.00994EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2023/04/14 12:00 a.m.•20 views

Apache OFBiz 路径遍历漏洞

Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. Apache OFBiz suffers from a path traversal vulnerability that stems from the application failing to properl...

7.5CVSS6.9AI score0.1018EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/13 12:00 a.m.•9 views

CVE-2023-27812: Improper Limitation of a Pathname to a Restricted Directory

bloofox v0.5.2 was discovered to contain an arbitrary file deletion vulnerability via the deletefile function...

9.1CVSS5.9AI score0.01163EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/03/29 12:00 a.m.•16 views

Enterprise Distributed Technologies CompleteFTP Server 路径遍历漏洞

Enterprise Distributed Technologies CompleteFTP Server is a Windows-based SFTP SHH File Transfer Protocol server from Enterprise Distributed Technologies, Australia. A path traversal vulnerability exists in Enterprise Distributed Technologies CompleteFTP Server version v22.1.0, which arises from...

9.1CVSS7.8AI score0.77688EPSS
SaveExploits0References2
Veracode
Veracode
•added 2023/01/03 4:49 p.m.•24 views

Path Traversal

github.com/jfrazelle/pastebinit is vulnerable to path traversal. The vulnerability exists due to the improper path handling in the pasteHandler function of server.go, allowing an attacker to access files outside the restricted directory...

5.3CVSS4.6AI score0.00802EPSS
SaveExploits0References6Affected Software1
Github Security Blog
Github Security Blog
•added 2022/12/28 12:30 a.m.•38 views

tar-utils Path Traversal vulnerability

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS8.7AI score0.0107EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
•added 2022/12/28 12:30 a.m.•40 views

go-unzip vulnerable to Path Traversal

Due to improper path santization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS8.7AI score0.01285EPSS
SaveExploits1References6Affected Software1
Github Security Blog
Github Security Blog
•added 2022/12/28 12:30 a.m.•39 views

Cloud Foundry Archiver vulnerable to path traversal

Due to improper path santization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS4AI score0.01243EPSS
SaveExploits0References5Affected Software2
OSV
OSV
•added 2022/12/28 12:30 a.m.•68 views

GHSA-RMJ9-Q58G-9QGG go-unzip vulnerable to Path Traversal

Due to improper path santization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS9.1AI score0.01285EPSS
SaveExploits1References6
GitLab Advisory Database
GitLab Advisory Database
•added 2022/12/28 12:00 a.m.•76 views

Cloud Foundry Archiver vulnerable to path traversal

Due to improper path santization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS4AI score0.01243EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2022/12/27 10:15 p.m.•38 views

CVE-2020-36561

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS9.2AI score
SaveExploits0References4
OSV
OSV
•added 2022/12/27 10:15 p.m.•25 views

CVE-2018-25046

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS9.2AI score
SaveExploits0References3
OSV
OSV
•added 2022/12/27 10:15 p.m.•25 views

CVE-2020-36566

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS9.2AI score
SaveExploits0References3
NVD
NVD
•added 2022/12/27 10:15 p.m.•40 views

CVE-2020-36561

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

9.1CVSS0.01363EPSS
SaveExploits1References4
Rows per page
Query Builder