Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-3105

Malicious code in bioql PyPI...

5.3CVSS5.7AI score0.00083EPSS
Exploits0References7
OSV
OSV
added 2023/12/08 9:30 p.m.16 views

GHSA-4WRM-QMQ2-5FJX Directory Traversal in evershop

Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the readDirSync function in fileBrowser/browser.js...

5.3CVSS4.9AI score0.00083EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2023/12/08 9:30 p.m.13 views

Directory Traversal in evershop

Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the readDirSync function in fileBrowser/browser.js...

5.3CVSS6.3AI score0.00083EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2023/12/08 8:15 p.m.10 views

CVE-2023-46493

Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the readDirSync function in fileBrowser/browser.js...

5.3CVSS0.00083EPSS
Exploits0References2
OSV
OSV
added 2023/12/08 8:15 p.m.2 views

CVE-2023-46493

Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the readDirSync function in fileBrowser/browser.js...

5.3CVSS5.8AI score0.00083EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2023/12/08 8:15 p.m.2 views

CVE-2023-46493

Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the readDirSync function in fileBrowser/browser.js...

5.3CVSS5.8AI score0.00083EPSS
Exploits0References3
Prion
Prion
added 2023/12/08 8:15 p.m.13 views

Directory traversal

Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the readDirSync function in fileBrowser/browser.js...

5CVSS6.5AI score0.00083EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder