Lucene search
+L

7 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•5 views

CVE-2026-55530: Missing Authorization

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, astgreprewrite lacks the @requireapproval decorator used by sibling mutation tools. With dryrun=False, an agent-controlled call can pass --update-all and a broad path to rewrite matching files without the expected...

6.1CVSS5.9AI score0.00166EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/11/20 12:00 a.m.•16 views

PT-2023-23194 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.2.2 Description: The issue allows a local attacker to obtain confidential information or rewrite sensitive files due to incorrect default permissions. Recommendations: For OpenHarmony versions prior to 3.2.2,...

7.3CVSS6.6AI score0.00184EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2021/11/25 12:00 a.m.•16 views

Cisco Firepower Management Center File Read/Write

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves deficiencies in path name checking for the directory. Exploiting this vulnerability allows a malicious actor to read or re-record arbitrary files using specially created HTTPS requests...

8.1CVSS7.5AI score0.01987EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•18 views

Cisco IOS XR File Read/Write

The vulnerability of the SSH server on the Cisco IOS XR operating system is related to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability allows a remote attacker to read and rewrite any files as desired...

8.5CVSS7.5AI score0.01581EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/25 12:00 a.m.•20 views

Spring Framework Privilege Escalation

The vulnerability of the Spring Framework software is caused by privilege management errors. Exploiting this vulnerability allows an attacker to read and rewrite any files at will...

7.8CVSS6.8AI score0.00381EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2020/03/04 12:00 a.m.•13 views

Cisco Unity Connection File Write

The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to re-write files in the...

6.6CVSS6.3AI score0.0181EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2018/07/27 12:00 a.m.•22 views

F5 BIG-IP Denial of Service Vulnerability (CNVD-2018-21232)

F5 BIG-IP is an all-in-one network device from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A security vulnerability exists in the F5 BIG-IP. A remote attacker can exploit this vulnerability to cause a denial of service wh...

5.3CVSS5.4AI score0.01194EPSS
SaveExploits0References1
Rows per page
Query Builder