Lucene search
K

1842 matches found

Vulnrichment
Vulnrichment
added 2024/08/28 4:30 p.m.14 views

CVE-2024-7744 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Progress WS_FTP Server

In WSFTP Server versions before 8.8.8 2022.0.8, an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in the Web Transfer Module allows File Discovery, Probe System Files, User-Controlled Filename, Path Traversal. An authenticated file download flaw has...

6.5CVSS6.7AI score0.00312EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/08/28 12:0 a.m.2 views

Progress Software WS_FTP Server 安全漏洞

Progress Software WSFTP Server is an effective and highly manageable FTP server from Progress Software, Inc. A security vulnerability exists in Progress Software WSFTP Server versions prior to 8.8.8 that stems from an improper restriction of pathnames...

6.5CVSS6.5AI score0.00312EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2024/08/27 12:0 a.m.30 views

Progress WhatsUp Gold < 24.0.0 Multiple Vulnerabilities (000263015)

The version of Progress WhatsUp Gold installed on the remote host is prior to 24.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the 000263015 advisory: - In WhatsUp Gold versions released before 2024.0.0, if the application is configured with only a single user, a SQ...

9.8CVSS9.1AI score0.94468EPSS
Exploits2References5
NVD
NVD
added 2024/08/25 2:15 a.m.10 views

CVE-2024-8140

A vulnerability was found in SourceCodester Task Progress Tracker 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file update-task.php. The manipulation of the argument taskname leads to cross site scripting. The attack may be launched remotely. The...

5.4CVSS0.00133EPSS
Exploits1References5
OSV
OSV
added 2024/08/25 2:15 a.m.1 views

CVE-2024-8140

A vulnerability was found in SourceCodester Task Progress Tracker 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file update-task.php. The manipulation of the argument taskname leads to cross site scripting. The attack may be launched remotely. The...

5.4CVSS3.8AI score0.00133EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/08/25 1:31 a.m.9 views

CVE-2024-8140 SourceCodester Task Progress Tracker update-task.php cross site scripting

A vulnerability was found in SourceCodester Task Progress Tracker 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file update-task.php. The manipulation of the argument taskname leads to cross site scripting. The attack may be launched remotely. The...

5.3CVSS6.2AI score0.00133EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/08/25 1:31 a.m.13 views

CVE-2024-8140 SourceCodester Task Progress Tracker update-task.php cross site scripting

A vulnerability was found in SourceCodester Task Progress Tracker 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file update-task.php. The manipulation of the argument taskname leads to cross site scripting. The attack may be launched remotely. The...

5.3CVSS0.00133EPSS
Exploits1References5
CVE
CVE
added 2024/08/25 1:31 a.m.59 views

CVE-2024-8140

CVE-2024-8140 affects SourceCodester Task Progress Tracker 1.0. The vulnerability is in the file update-task.php where manipulation of the parameter task_name enables Cross-Site Scripting (XSS) . Exploitation can be remote and the exploit has been disclosed publicly. Public sources consistently i...

5.4CVSS3.8AI score0.00133EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2024/08/25 12:0 a.m.1 views

SourceCodester Task Progress Tracker 跨站脚本漏洞

SourceCodester Task Progress Tracker is a task progress tracker from SourceCodester. A cross-site scripting vulnerability exists in version 1.0 of SourceCodester Task Progress Tracker, which stems from a cross-site scripting vulnerability in the taskname parameter of the update-task.php file...

5.4CVSS4.5AI score0.00133EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2024/08/24 12:0 a.m.2 views

PT-2024-38829 · Sourcecodester · Sourcecodester Task Progress Tracker

Name of the Vulnerable Software and Affected Versions: SourceCodester Task Progress Tracker version 1.0 Description: A vulnerability was found in the file update-task.php, where the manipulation of the task name argument leads to cross-site scripting. The attack may be launched remotely. The...

5.4CVSS6.9AI score0.00133EPSS
Exploits1References13
SUSE CVE
SUSE CVE
added 2024/08/23 2:53 a.m.1 views

SUSE CVE-2022-48901

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not start relocation until in progress drops are done We hit a bug with a recovering relocation on mount for one of our file systems in production. I reproduced this locally by injecting errors into snapshot delete with...

5.5CVSS7.8AI score0.00028EPSS
Exploits0References9
OSV
OSV
added 2024/08/22 2:15 a.m.1 views

DEBIAN-CVE-2022-48901

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not start relocation until in progress drops are done We hit a bug with a recovering relocation on mount for one of our file systems in production. I reproduced this locally by injecting errors into snapshot delete with...

5.5CVSS6.2AI score0.00028EPSS
Exploits0References1
OSV
OSV
added 2024/08/22 2:15 a.m.0 views

UBUNTU-CVE-2022-48901

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not start relocation until in progress drops are done We hit a bug with a recovering relocation on mount for one of our file systems in production. I reproduced this locally by injecting errors into snapshot delete with...

5.5CVSS6.6AI score0.00028EPSS
Exploits0References6
Cvelist
Cvelist
added 2024/08/22 1:30 a.m.22 views

CVE-2022-48901 btrfs: do not start relocation until in progress drops are done

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not start relocation until in progress drops are done We hit a bug with a recovering relocation on mount for one of our file systems in production. I reproduced this locally by injecting errors into snapshot delete with...

0.00028EPSS
Exploits0References3
OSV
OSV
added 2024/08/16 2:15 p.m.1 views

CVE-2024-7145

The JetElements plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.6.20 via the 'progresstype' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the...

8.8CVSS6.3AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/08/16 12:0 a.m.2 views

PT-2024-38108 · WordPress · Jetelements

Name of the Vulnerable Software and Affected Versions: JetElements plugin for WordPress versions up to and including 2.6.20 Description: The issue allows authenticated attackers with Contributor-level access and above to include and execute arbitrary files on the server via the progress type...

8.8CVSS7.8AI score0.00569EPSS
Exploits0References10
NVD
NVD
added 2024/08/14 9:15 p.m.11 views

CVE-2024-7793

A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-task.php. The manipulation of the argument taskname leads to cross site scripting. The attack can be...

5.4CVSS0.00089EPSS
Exploits1References4
OSV
OSV
added 2024/08/14 9:15 p.m.1 views

CVE-2024-7793

A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-task.php. The manipulation of the argument taskname leads to cross site scripting. The attack can be...

5.4CVSS3.8AI score0.00089EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/08/14 9:0 p.m.12 views

CVE-2024-7793 SourceCodester Task Progress Tracker add-task.php cross site scripting

A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-task.php. The manipulation of the argument taskname leads to cross site scripting. The attack can be...

5.3CVSS0.00089EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/08/14 9:0 p.m.13 views

CVE-2024-7793 SourceCodester Task Progress Tracker add-task.php cross site scripting

A vulnerability was found in SourceCodester Task Progress Tracker 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-task.php. The manipulation of the argument taskname leads to cross site scripting. The attack can be...

5.3CVSS6.2AI score0.00089EPSS
Exploits1References4
Rows per page
Query Builder