Lucene search
K

7 matches found

Zero Day Initiative
Zero Day Initiative
added 2024/03/28 12:0 a.m.13 views

SolarWinds Access Rights Manager OpenFile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the OpenFile method. The issue results from the lack of proper validati...

10CVSS7.7AI score0.01937EPSS
Exploits0References1
OSV
OSV
added 2023/12/28 4:15 a.m.2 views

CVE-2023-51006

An issue in the openFile method of Chinese Perpetual Calendar v9.0.0 allows attackers to read any file via unspecified vectors...

7.5CVSS5.8AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/12/28 4:15 a.m.1 views

CVE-2023-51006

An issue in the openFile method of Chinese Perpetual Calendar v9.0.0 allows attackers to read any file via unspecified vectors...

7.5CVSS5.8AI score0.00092EPSS
Exploits1References2
NVD
NVD
added 2023/12/28 4:15 a.m.10 views

CVE-2023-51006

An issue in the openFile method of Chinese Perpetual Calendar v9.0.0 allows attackers to read any file via unspecified vectors...

7.5CVSS0.00092EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/12/28 12:0 a.m.1 views

Chinese Perpetual Calendar Security Vulnerability

Chinese Perpetual Calendar 微鲤万年历 is a mobile calendar application. A security vulnerability exists in Chinese Perpetual Calendar version v9.0.0, which originates from an arbitrary file read vulnerability in the openFile method...

7.5CVSS6.8AI score0.00092EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/12/28 12:0 a.m.14 views

CVE-2023-51006

An issue in the openFile method of Chinese Perpetual Calendar v9.0.0 allows attackers to read any file via unspecified vectors...

7.5AI score0.00092EPSS
Exploits1References1
CVE
CVE
added 2023/12/28 12:0 a.m.43 views

CVE-2023-51006

CVE-2023-51006 affects Chinese Perpetual Calendar v9.0.0. The openFile method reportedly allows attackers to read any file via unspecified vectors. According to the initial records, the vulnerability has a Network attack vector with low complexity, no privileges or user interaction required, and ...

7.5CVSS7.3AI score0.00092EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder