Lucene search
+L

307 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/12/29 12:00 a.m.•8 views

CVE-2016-9878: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5. Paths provided to the ResourceServlet were not properly sanitized and as a result exposed to directory traversal attacks...

7.5CVSS7.4AI score0.05748EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2016/07/07 12:00 a.m.•17 views

The vulnerability of the Security SiteProtector System, a website security protection system, allows a hacker to write arbitrary files.

The vulnerability of the Security SiteProtector System’s security protection mechanism exists due to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability allows a malicious actor to remotely write arbitrary files...

5.5CVSS5.6AI score0.01336EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2015/02/20 12:00 a.m.•6 views

PT-2015-4006

Name of the Vulnerable Software and Affected Versions UberFire Framework versions 0.3.x Description The issue allows remote attackers to execute arbitrary code by uploading crafted content to "FileUploadServlet" or read arbitrary files via vectors involving "FileDownloadServlet" due to improper...

6.8CVSS0.03101EPSS
SaveExploits0References7
OpenVAS
OpenVAS
•added 2014/04/09 12:00 a.m.•56 views

Microsoft File Handling Component Remote Code Execution Vulnerability (2922229)

This host is missing an important security update according to Microsoft Bulletin MS14-019. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

6.9CVSS5.1AI score0.14619EPSS
SaveExploits4References4
Tenable Nessus
Tenable Nessus
•added 2013/01/10 12:00 a.m.•61 views

Google Chrome < 24.0.1312.52 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 24.0.1312.52 and is, therefore, affected by the following vulnerabilities : - Use-after-free errors exist related to SVG layout, DOM handling, video seeking, PDF fields and printing. CVE-2012-5145, CVE-2012-5147,...

10CVSS8.6AI score0.08158EPSS
SaveExploits3References25
Positive Technologies
Positive Technologies
•added 2012/02/08 12:00 a.m.•2 views

PT-2012-1769

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 17.0.963.46 Description The issue is related to improper path clipping, allowing remote attackers to cause a denial of service out-of-bounds read via unspecified vectors. Recommendations For versions prior to...

4.3CVSS0.01217EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2012/01/10 12:00 a.m.•41 views

Google Chrome < 24.0.1312.52 Multiple Vulnerabilities

Binary data 800917.prm...

10CVSS8.3AI score0.08158EPSS
SaveExploits0References27
Rows per page
Query Builder