Lucene search
+L

8 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/19 12:00 a.m.•1 views

CVE-2014-9609: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in webadmin/reporter/viewserverlog.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to list directory contents via a .. dot dot in the log parameter in a stats action...

5.3CVSS6AI score0.12631EPSS
SaveExploits1References2
NVD
NVD
•added 2018/11/26 11:29 p.m.•28 views

CVE-2018-13322

Directory traversal in listfolders method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to list directory contents via the "path" parameter...

6.5CVSS6.5AI score0.01308EPSS
SaveExploits1References1
Prion
Prion
•added 2018/11/26 11:29 p.m.•20 views

Directory traversal

Directory traversal in listfolders method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to list directory contents via the "path" parameter...

4CVSS6.4AI score0.01308EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/26 12:00 a.m.•4 views

CVE-2018-13322: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal in listfolders method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to list directory contents via the "path" parameter...

6.5CVSS6.6AI score0.01308EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2009/05/07 11:45 a.m.•13 views

OpenJDK allows to list files within the user home directory (6484091)

Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows untrusted applications and applets to list the contents of the operating user's directory via unknown vectors...

5CVSS7.1AI score0.03013EPSS
SaveExploits1References4
NVD
NVD
•added 2008/04/01 4:44 p.m.•24 views

CVE-2008-1606

Multiple directory traversal vulnerabilities in Elastic Path EP 4.1 and 4.1.1 allow remote attackers to 1 download arbitrary files via a .. dot dot in the file parameter to manager/getImportFileRedirect.jsp, 2 upload arbitrary files via a ".." dot dot backslash in the file parameter to...

6CVSS7AI score0.02141EPSS
SaveExploits3References7
Cvelist
Cvelist
•added 2005/10/23 4:00 a.m.•35 views

CVE-2005-3293

Xerver 4.17 allows remote attackers to 1 obtain source code of scripts via a request with a trailing "." dot or 2 list directory contents via a trailing null character...

6.8AI score0.07816EPSS
SaveExploits3References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/05/17 12:00 a.m.•3 views

CVE-2003-0313: Undefined Security Weakness

Directory traversal vulnerability in Snowblind Web Server 1.0 allows remote attackers to list arbitrary directory contents via a ... triple dot in an HTTP request...

6.4CVSS6AI score0.02239EPSS
SaveExploits0References1
Rows per page
Query Builder