Lucene search
+L

28 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/09 12:00 a.m.•2 views

CVE-2019-19683: Improper Limitation of a Pathname to a Restricted Directory

RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to ../ path traversal via d or f to Admin/RoxyFileman/ProcessRequest because of Libraries/Nop.Services/Media/RoxyFileman/FileRoxyFilemanService.cs...

9.1CVSS8.2AI score0.0181EPSS
SaveExploits1References2
OSV
OSV
•added 2018/11/06 4:29 a.m.•13 views

CVE-2018-18980

An XML External Entity injection XXE vulnerability exists in Zoho ManageEngine Network Configuration Manager and OpManager before 12.3.214 via the RequestXML parameter in a /devices/ProcessRequest.do GET request. For example, the attacker can trigger the transmission of local files to an arbitrar...

7.5CVSS5.9AI score0.24995EPSS
SaveExploits1References2
OSV
OSV
•added 2017/03/24 3:59 p.m.•17 views

DEBIAN-CVE-2016-3178

The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service out-of-bounds memory access and daemon crash via vectors involving a negative length value...

5.5CVSS6.4AI score0.00316EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2017/03/24 3:59 p.m.•25 views

CVE-2016-3179

The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service invalid free and daemon crash via vectors related to error handling...

5.5CVSS6.1AI score0.00316EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2017/03/24 3:00 p.m.•49 views

CVE-2016-3179

The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service invalid free and daemon crash via vectors related to error handling...

5.5CVSS5.2AI score0.00316EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2012/07/12 9:00 p.m.•47 views

CVE-2012-3382

Cross-site scripting XSS vulnerability in the ProcessRequest function in mcs/class/System.Web/System.Web/HttpForbiddenHandler.cs in Mono 2.10.8 and earlier allows remote attackers to inject arbitrary web script or HTML via a file with a crafted name and a forbidden extension, which is not properl...

4.3CVSS5.4AI score0.01914EPSS
SaveExploits1
zdt
zdt
•added 2010/09/03 12:00 a.m.•34 views

Visinia 1.3 Multiple Vulnerabilities

Exploit for asp platform in category web applications ==================================== Visinia 1.3 Multiple Vulnerabilities ==================================== Title : Visinia Multiple Vulnerabilities Affected Version : Visinia 1.3 Discovery : www.abysssec.com Vendor : http://www.visinia.com...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2010/09/03 12:00 a.m.•29 views

visinia 1.3 - Multiple Vulnerabilities

visinia 1.3 - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 3 0day | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : Visinia Multiple Vulnerabilities Affected Version : Visinia 1.3 Discovery :...

0.4AI score
SaveExploits0
Rows per page
Query Builder