Lucene search
+L

17 matches found

RedhatCVE
RedhatCVE
•added 2026/05/14 2:21 a.m.•26 views

CVE-2026-41465

ProjeQtor versions 7.0 through 12.4.3 contain a path traversal vulnerability in the log file viewer at dynamicDialog.php where the logname parameter is not validated against directory traversal sequences before constructing file paths. Authenticated attackers can inject directory traversal...

7.1CVSS5.9AI score0.00794EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/27 4:16 p.m.•27 views

CVE-2026-41465

ProjeQtor versions 7.0 through 12.4.3 contain a path traversal vulnerability in the log file viewer at dynamicDialog.php where the logname parameter is not validated against directory traversal sequences before constructing file paths. Authenticated attackers can inject directory traversal...

7.1CVSS0.00794EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/04/27 3:10 p.m.•11 views

CVE-2026-41465

ProjeQtor versions 7.0 through 12.4.3 contain a path traversal vulnerability in the log file viewer at dynamicDialog.php where the logname parameter is not validated against directory traversal sequences before constructing file paths. Authenticated attackers can inject directory traversal...

7.1CVSS5.9AI score0.00794EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2026/04/27 3:10 p.m.•37 views

CVE-2026-41465

CVE-2026-41465 affects ProjeQtor versions 7.0–12.4.3. A path traversal vulnerability exists in the log file viewer (dynamicDialog.php) where the logname parameter is not validated against directory traversal sequences, allowing authenticated attackers to inject ../ and read arbitrary .log files a...

7.1CVSS6AI score0.00794EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/04/27 12:00 a.m.•15 views

PT-2026-35444

ProjeQtor versions 7.0 through 12.4.3 contains a path traversal vulnerability in the log file viewer at dynamicDialog.php where the logname parameter is not validated against directory traversal sequences before constructing file paths. Authenticated attackers can inject directory traversal...

7.1CVSS5.5AI score0.00794EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/27 12:00 a.m.•3 views

CVE-2026-41465: Improper Limitation of a Pathname to a Restricted Directory

ProjeQtor versions 7.0 through 12.4.3 contain a path traversal vulnerability in the log file viewer at dynamicDialog.php where the logname parameter is not validated against directory traversal sequences before constructing file paths. Authenticated attackers can inject directory traversal...

7.1CVSS5.9AI score0.00794EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2002-1231

Malware in sbrugna...

7.2CVSS6.1AI score0.00515EPSS
SaveExploits0References15
Kitploit
Kitploit
•added 2023/01/24 11:30 a.m.•42 views

Get-AppLockerEventlog - Script For Fetching Applocker Event Log By Parsing The Win-Event Log

This script will parse all the channels of events from the win-event log to extract all the log relatives to AppLocker. The script will gather all the important pieces of information relative to the events for forensic or threat-hunting purposes, or even in order to troubleshoot. Here are the log...

7AI score
SaveExploits0References6
OPENSUSE Linux
OPENSUSE Linux
•added 2020/12/07 12:00 a.m.•63 views

Security update for minidlna (moderate)

openSUSE Security Update: Security update for minidlna Announcement ID: openSUSE-SU-2020:2194-1 Rating: moderate References: 1179447 Cross-References: CVE-2020-12695 CVE-2020-28926 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description: This...

9.8CVSS6.7AI score0.15193EPSS
SaveExploits5References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/11/06 12:00 a.m.•2 views

CVE-2003-0834: Undefined Security Weakness

Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via 1 a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, 2 DTSEARCHPATH, or 3 LOGNAME...

7.2CVSS6.5AI score0.01371EPSS
SaveExploits13References1
NVD
NVD
•added 2002/11/29 5:00 a.m.•33 views

CVE-2002-1247

Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for the resLISa daemon...

7.2CVSS6.5AI score0.00515EPSS
SaveExploits0References11
Cvelist
Cvelist
•added 2002/11/14 5:00 a.m.•45 views

CVE-2002-1247

Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for the resLISa daemon...

6.4AI score0.00515EPSS
SaveExploits0References11
CVE
CVE
•added 2002/11/14 5:00 a.m.•85 views

CVE-2002-1247

Buffer overflow in LISa/LISa-derived resLISa (KDE LAN browsing) allows local users to exploit through an overly long LOGNAME environment variable, enabling control of the resLISa process or related access. The vulnerability is triggered during parsing of LOGNAME, and exposed both in LISa and its ...

7.2CVSS6.4AI score0.00515EPSS
SaveExploits0References11Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/11/14 12:00 a.m.•3 views

CVE-2002-1247: Undefined Security Weakness

Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for the resLISa daemon...

7.2CVSS5.9AI score0.00515EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2002/11/12 12:00 a.m.•51 views

KDE resLISa buffer overflow

Buffer overflow on oversized LOGNAME environment variable...

5.8AI score
SaveExploits0References1Affected Software2
OSV
OSV
•added 2002/11/11 12:00 a.m.•34 views

DSA-193 kdenetwork - buffer overflow

Bulletin has no description...

7.2CVSS6.1AI score0.00515EPSS
SaveExploits0
exploitpack
exploitpack
•added 1997/09/01 12:00 a.m.•29 views

IRIX 5.36.x - usrbinmail Local Buffer Overflow

IRIX 5.36.x - usrbinmail Local Buffer Overflow / source: https://www.securityfocus.com/bid/1542/info The mail1 program, also know as mailatt, is used to read or send email. A buffer overflow condition exists in code that handles the LOGNAME environment variable. This could be exploited to elevate...

0.1AI score
SaveExploits0
Rows per page
Query Builder