Lucene search
K

11 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-19705

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00318EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2021-8878

Malicious code in bioql PyPI...

6.5CVSS7.2AI score0.01342EPSS
Exploits0References4
OSV
OSV
added 2025/01/14 7:22 p.m.13 views

BIT-PHP-MIN-2021-21706 ZipArchive::extractTo may extract outside of destination dir

In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Windows environment, ZipArchive::extractTo may be tricked into writing a file outside target directory when extracting a ZIP file, thus potentially causing files to be created or overwritten, subject to OS...

6.5CVSS6.4AI score0.01342EPSS
Exploits0References3
OSV
OSV
added 2024/03/06 11:4 a.m.38 views

BIT-PHP-2021-21706 ZipArchive::extractTo may extract outside of destination dir

In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Windows environment, ZipArchive::extractTo may be tricked into writing a file outside target directory when extracting a ZIP file, thus potentially causing files to be created or overwritten, subject to OS...

6.5CVSS6.4AI score0.01342EPSS
Exploits0References3
AlpineLinux
AlpineLinux
added 2021/10/04 4:0 a.m.28 views

CVE-2021-21706

In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Windows environment, ZipArchive::extractTo may be tricked into writing a file outside target directory when extracting a ZIP file, thus potentially causing files to be created or overwritten, subject to OS...

6.5CVSS6AI score0.01342EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2021/05/22 6:45 a.m.6 views

CVE-2021-1487 Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The vulnerability is due to insufficient validation of user-supplied...

8.8CVSS8AI score0.02115EPSS
Exploits0References1
NVD
NVD
added 2020/09/30 6:15 p.m.10 views

CVE-2020-21522

An issue was discovered in halo V1.1.3. A Zip Slip Directory Traversal Vulnerability in the backend,the attacker can overwrite some files, such as ftl files, .bashrc files in the user directory, and finally get the permissions of the operating system...

9.8CVSS0.01514EPSS
Exploits1References1
Prion
Prion
added 2020/09/30 6:15 p.m.18 views

Directory traversal

An issue was discovered in halo V1.1.3. A Zip Slip Directory Traversal Vulnerability in the backend,the attacker can overwrite some files, such as ftl files, .bashrc files in the user directory, and finally get the permissions of the operating system...

7.5CVSS9.2AI score0.01514EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2013/07/10 9:55 p.m.11 views

Command injection

The firmware on Cisco Virtualization Experience Client 6000 devices sets incorrect operating-system permissions, which allows local users to gain privileges via an unspecified sequence of commands, aka Bug ID CSCuc31764...

6.8CVSS7.3AI score0.00335EPSS
Exploits0References2
NVD
NVD
added 2013/07/10 9:55 p.m.19 views

CVE-2013-3408

The firmware on Cisco Virtualization Experience Client 6000 devices sets incorrect operating-system permissions, which allows local users to gain privileges via an unspecified sequence of commands, aka Bug ID CSCuc31764...

6.8CVSS6.8AI score0.00335EPSS
Exploits0References2
Cvelist
Cvelist
added 2013/07/10 9:0 p.m.15 views

CVE-2013-3408

The firmware on Cisco Virtualization Experience Client 6000 devices sets incorrect operating-system permissions, which allows local users to gain privileges via an unspecified sequence of commands, aka Bug ID CSCuc31764...

6.8AI score0.00335EPSS
Exploits0References2
Rows per page
Query Builder