CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/05/22 8:22 a.m.•3 views

CVE-2019-18393

PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory, aka a directory traversal vulnerability...

5.3CVSS6.8AI score0.13945EPSS

Exploits1References1

Veracode•added 2019/10/25 2:59 a.m.•13 views

Directory Traversal

xmppserver is vulnerable to directory traversal. Lack of validation of file names in the handleOtherRequest function in PluginServlet.java allows an attacker to retrieve local system files...

5.3CVSS4.6AI score0.13945EPSS

Exploits1References3Affected Software1

NVD•added 2019/10/24 11:15 a.m.•13 views

CVE-2019-18393

PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory, aka a directory traversal vulnerability...

5.3CVSS5.2AI score0.13945EPSS

Exploits1References2

OSV•added 2019/10/24 11:15 a.m.•8 views

CVE-2019-18393

PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory, aka a directory traversal vulnerability...

5.3CVSS7.1AI score

Exploits0References2

Cvelist•added 2019/10/24 10:58 a.m.•15 views

CVE-2019-18393

PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory, aka a directory traversal vulnerability...

5.6AI score0.13945EPSS

Exploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by