CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Rapid7 Vulnerability Database (full)•added 2025/02/12 12:00 a.m.•0 views

CVE-2025-26354: Path Traversal: '.../...//'

A CWE-35 "Path Traversal" in maxtime/api/database/database.lua copy endpoint in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to overwrite sensitive files via crafted HTTP requests...

7.2CVSS5.8AI score0.00839EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2025/02/12 12:00 a.m.•0 views

CVE-2025-26355: Path Traversal: '.../...//'

A CWE-35 "Path Traversal" in maxtime/api/database/database.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to delete sensitive files via crafted HTTP requests...

6.5CVSS5.8AI score0.00929EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2025/02/12 12:00 a.m.•3 views

CVE-2025-26357: Path Traversal: '.../...//'

A CWE-35 "Path Traversal" in maxtime/api/database/database.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to read sensitive files via crafted HTTP requests...

4.9CVSS5.8AI score0.00756EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by