Lucene search
K

12 matches found

OSV
OSV
added 2026/06/12 8:7 p.m.8 views

GHSA-3V8V-4WG6-R7QH TYPO3 CMS: Destructive Actions on File Mount Folders

Problem Non-privileged backend users with file mount access were able to perform write operations move, delete, rename on folders representing the root of an active file mount due to missing authorization restrictions. Solution Update to TYPO3 versions 10.4.57 ELTS, 11.5.51 ELTS, 12.4.46 ELTS,...

7.2CVSS5.3AI score0.00238EPSS
Exploits0References7
EUVD
EUVD
added 2026/06/12 8:7 p.m.11 views

EUVD-2026-35392

TYPO3 CMS: Destructive Actions on File Mount Folders...

7.2CVSS5.2AI score0.00238EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/06/09 10:49 a.m.31 views

CVE-2026-47343 TYPO3 CMS - Destructive Actions on File Mount Folders

Non-privileged backend users with file mount access were able to perform write operations move, delete, rename on folders representing the root of an active file mount due to missing authorization restrictions. This issue affects TYPO3 CMS versions before 10.4.57, 11.0.0 through 11.5.50, 12.0.0...

7.2CVSS0.00238EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.13 views

PT-2026-47738

Name of the Vulnerable Software and Affected Versions TYPO3 CMS versions prior to 10.4.57 TYPO3 CMS versions 11.0.0 through 11.5.50 TYPO3 CMS versions 12.0.0 through 12.4.45 TYPO3 CMS versions 13.0.0 through 13.4.30 TYPO3 CMS versions 14.0.0 through 14.3.2 Description Non-privileged backend users...

7.2CVSS5.2AI score0.00238EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/03 8:7 p.m.13 views

EUVD-2024-50408

Malicious code in bioql PyPI...

5.3CVSS6.6AI score0.00302EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:18 a.m.4 views

CVE-2024-9945

An information-disclosure vulnerability exists in Fortra's GoAnywhere MFT application prior to version 7.7.0 that allows external access to the resources in certain admin root folders...

5.3CVSS6.9AI score0.00302EPSS
Exploits0References1
NVD
NVD
added 2024/12/13 4:15 p.m.12 views

CVE-2024-9945

An information-disclosure vulnerability exists in Fortra's GoAnywhere MFT application prior to version 7.7.0 that allows external access to the resources in certain admin root folders...

5.3CVSS0.00302EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/13 3:22 p.m.9 views

CVE-2024-9945 Limited Information Disclosure in GoAnywhere MFT Prior to 7.7.0

An information-disclosure vulnerability exists in Fortra's GoAnywhere MFT application prior to version 7.7.0 that allows external access to the resources in certain admin root folders...

5.3CVSS6.8AI score0.00302EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/13 3:22 p.m.18 views

CVE-2024-9945 Limited Information Disclosure in GoAnywhere MFT Prior to 7.7.0

An information-disclosure vulnerability exists in Fortra's GoAnywhere MFT application prior to version 7.7.0 that allows external access to the resources in certain admin root folders...

5.3CVSS0.00302EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/13 12:0 a.m.2 views

Fortra GoAnywhere MFT 安全漏洞

Fortra GoAnywhere MFT is a secure file transfer solution from Fortra USA. A security vulnerability exists in Fortra GoAnywhere MFT versions prior to 7.7.0 that stems from an information disclosure vulnerability that allows external access to resources in certain administrative root folders...

5.3CVSS6.1AI score0.00302EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/12/13 12:0 a.m.6 views

PT-2024-39958 · Fortra · Goanywhere Mft

Name of the Vulnerable Software and Affected Versions: Fortra's GoAnywhere MFT versions prior to 7.7.0 Description: An information-disclosure issue exists in Fortra's GoAnywhere MFT application that allows external access to resources in certain admin root folders. By default, these folders...

5.3CVSS7AI score0.00302EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2007/12/20 8:46 p.m.3 views

CVE-2007-6495

incnewuser.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to change the permissions of directories named 1 db, 2 www, 3 Special, and 4 log at arbitrary locations under the web root via a modified Dirroot parameter in an AddUser action to...

6.5CVSS6.7AI score0.0437EPSS
Exploits0References9
Rows per page
Query Builder