Lucene search
+L

234 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 5:19 a.m.10 views

CVE-2023-3348

The Wrangler command line tool [email protected] or [email protected] was affected by a directory traversal vulnerability when running a local development server for Pages wrangler pages dev command. This vulnerability enabled an attacker in the same network as the victim to connect to the local...

5.7CVSS6.8AI score0.00817EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/15 4:34 p.m.41 views

CVE-2025-30207

Kirby is an open-source content management system. A vulnerability in versions prior to 3.9.8.3, 3.10.1.2, and 4.7.1 affects all Kirby setups that use PHP's built-in server. Such setups are commonly only used during local development. Sites that use other server software such as Apache, nginx or...

7.5CVSS6.8AI score0.00564EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2025/05/13 8:02 p.m.24 views

Kirby vulnerable to path traversal in the router for PHP's built-in server

TL;DR This vulnerability affects all Kirby setups that use PHP's built-in server. Such setups are commonly only used during local development. Sites that use other server software such as Apache, nginx or Caddy are not affected. ---- Introduction For use with PHP's built-in web server, Kirby...

7.5CVSS6.7AI score0.00564EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2025/05/13 8:02 p.m.14 views

GHSA-9P3P-W5JF-8XXG Kirby vulnerable to path traversal in the router for PHP's built-in server

TL;DR This vulnerability affects all Kirby setups that use PHP's built-in server. Such setups are commonly only used during local development. Sites that use other server software such as Apache, nginx or Caddy are not affected. ---- Introduction For use with PHP's built-in web server, Kirby...

2.3CVSS6.6AI score0.00564EPSS
SaveExploits0References7
OSV
OSV
added 2025/05/13 3:20 p.m.11 views

CVE-2025-30207 Kirby vulnerable to path traversal in the router for PHP's built-in server

Kirby is an open-source content management system. A vulnerability in versions prior to 3.9.8.3, 3.10.1.2, and 4.7.1 affects all Kirby setups that use PHP's built-in server. Such setups are commonly only used during local development. Sites that use other server software such as Apache, nginx or...

2.3CVSS6.5AI score
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2024/01/09 12:00 a.m.39 views

Amazon Linux 2 : perl-HTTP-Daemon (ALAS-2024-2405)

The version of perl-HTTP-Daemon installed on the remote host is prior to 6.01-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2405 advisory. HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which cou...

7.3CVSS6.3AI score0.02264EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:00 a.m.10 views

The vulnerability of multi-platform software for local development and website debugging, caused by buffer overflows, allows attackers to trigger service failures.

The vulnerability of multi-platform software for local website development and debugging is due to buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS5.9AI score
SaveExploits4References2Affected Software1
OSV
OSV
added 2023/08/03 4:34 p.m.33 views

GHSA-8C93-4HCH-XGXP Cloudflare Wrangler directory traversal vulnerability

Impact The Wrangler command line tool [email protected] or [email protected] was affected by a directory traversal vulnerability when running a local development server for Pages wrangler pages dev command. This vulnerability enabled an attacker in the same network as the victim to connect to the...

5.7CVSS5.5AI score0.00817EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2023/08/03 4:34 p.m.33 views

Cloudflare Wrangler directory traversal vulnerability

Impact The Wrangler command line tool [email protected] or [email protected] was affected by a directory traversal vulnerability when running a local development server for Pages wrangler pages dev command. This vulnerability enabled an attacker in the same network as the victim to connect to the...

5.7CVSS5.5AI score0.00817EPSS
SaveExploits0References8Affected Software1
NVD
NVD
added 2023/08/03 3:15 p.m.19 views

CVE-2023-3348

The Wrangler command line tool [email protected] or [email protected] was affected by a directory traversal vulnerability when running a local development server for Pages wrangler pages dev command. This vulnerability enabled an attacker in the same network as the victim to connect to the local...

5.7CVSS5.6AI score0.00817EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/08/03 1:47 p.m.14 views

CVE-2023-3348 Directory traversal vulnerability in Cloudflare Wrangler

The Wrangler command line tool [email protected] or [email protected] was affected by a directory traversal vulnerability when running a local development server for Pages wrangler pages dev command. This vulnerability enabled an attacker in the same network as the victim to connect to the local...

5.7CVSS6.7AI score0.00817EPSS
SaveExploits0References3
CVE
CVE
added 2023/08/03 1:47 p.m.57 views

CVE-2023-3348

The CVE-2023-3348 entry concerns the Cloudflare Wrangler CLI and its pages dev local development server. Affected components: Wrangler (<=3.1.0) and Wrangler (

5.7CVSS5.5AI score0.00817EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/08/03 1:47 p.m.29 views

CVE-2023-3348 Directory traversal vulnerability in Cloudflare Wrangler

The Wrangler command line tool [email protected] or [email protected] was affected by a directory traversal vulnerability when running a local development server for Pages wrangler pages dev command. This vulnerability enabled an attacker in the same network as the victim to connect to the local...

5.7CVSS5.9AI score0.00817EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2023/07/27 12:00 a.m.4 views

WordPress Local Development Plugin <= 2.8.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Local Development Type Plugin Vulnerable versions = 2.8.2 Fixed in 2.8.3 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 17dad3e2a486 Credits Unknown Required privilege...

7AI score
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/03/08 12:00 a.m.42 views

Fedora 36 : perl-HTTP-Daemon (2023-c230cc08c4)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-c230cc08c4 advisory. 6.16 2023-02-24 03:07:14Z - Bump LWP::UserAgent to 6.37 in TestSuggests GH65 Olaf Alders 6.15 2023-02-22 22:02:46Z - Fix CVE-2022-31081: Inconsistent...

7.3CVSS6.4AI score0.02264EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2022/06/27 9:15 p.m.42 views

CVE-2022-31081

HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served ...

7.3CVSS6.7AI score0.02264EPSS
SaveExploits1References8
Debian CVE
Debian CVE
added 2022/06/27 12:00 a.m.67 views

CVE-2022-31081

HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be exploited to gain privileged access to APIs or poison intermediate caches. It is uncertain how large the risks are, most Perl based applications are served ...

7.3CVSS6.9AI score0.02264EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2022/02/15 12:00 a.m.11 views

Azure Functions Local Settings Detected

Azure Functions is a public cloud service from Microsoft providing a serverless computing platform which supports various programming languages C, Python, JavaScript.... Before deploying their functions to the cloud, developers often write and test their code in their local development environmen...

7.1AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2020/09/01 6:54 p.m.29 views

Directory Traversal in section2.madisonjbrooks12

Affected versions of section2.madisonjbrooks12 resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable...

7.5CVSS7.1AI score0.02005EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2020/09/01 6:53 p.m.32 views

GHSA-F8RJ-4V7G-P5RJ Directory Traversal in jansenstuffpleasework

Affected versions of jansenstuffpleasework resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable...

7.5CVSS7.4AI score0.02005EPSS
SaveExploits1References3
Rows per page
Query Builder