15 matches found
CVE-2024-25183
givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php...
CVE-2024-25183
givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php...
PT-2025-53790
Name of the Vulnerable Software and Affected Versions givanz VvvebJs version 1.7.2 Description givanz VvvebJs version 1.7.2 contains a flaw due to which an attacker can perform Directory Traversal via the scan.php file. This allows unauthorized access to files and directories on the system...
CVE-2024-25183
givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php...
CVE-2024-25183: Improper Limitation of a Pathname to a Restricted Directory
givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php...
CVE-2024-25183
givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php...
PT-2023-15649 · Jokob Sk · Pi.Alert
Name of the Vulnerable Software and Affected Versions: jokob-sk/Pi.Alert versions prior to 22.12.20 Description: The issue allows Remote Code Execution via nmap scan.php scan parameter OS Command Injection. Recommendations: For versions prior to 22.12.20, consider disabling access to the nmap...
PT-2017-6722
Name of the Vulnerable Software and Affected Versions AlienVault OSSIM versions prior to 5.0.1 Description The issue allows remote authenticated users to execute arbitrary commands. This is achieved by manipulating the assets array parameter in the /netscan/do scan.php API endpoint. Recommendatio...
ownCloud Server Denial of Service Vulnerability (CNVD-2016-00188)
OwnCloud is a free and open source personal cloud storage solution from German company OwnCloud, which provides file management, music storage, calendaring, etc. OwnCloud Server is a server version. A security vulnerability exists in ownCloud Server, which stems from the failure of the...
CVE-2016-1499
ownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote authenticated users to obtain sensitive information from a directory listing and possibly cause a denial of service CPU consumption via the force parameter to index.php/apps/files/ajax/scan.php...
CVE-2016-1499: Exposure of Sensitive Information to an Unauthorized Actor
ownCloud Server before 8.0.10, 8.1.x before 8.1.5, and 8.2.x before 8.2.2 allow remote authenticated users to obtain sensitive information from a directory listing and possibly cause a denial of service CPU consumption via the force parameter to index.php/apps/files/ajax/scan.php...
PT-2016-4845
Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 8.0.10 ownCloud Server versions 8.1.x prior to 8.1.5 ownCloud Server versions 8.2.x prior to 8.2.2 Description The issue allows remote authenticated users to obtain sensitive information from a directory listi...
The vulnerability in the web application for data synchronization with ownCloud allows a hacker to read the list of directory contents or cause a service failure.
The vulnerability of the web application for syncing data with ownCloud exists due to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to read the content of the directories or cause service failures by manipulating the...
CVE-2015-6500: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in ownCloud Server before 8.0.6 and 8.1.x before 8.1.1 allows remote authenticated users to list directory contents and possibly cause a denial of service CPU consumption via a .. dot dot in the dir parameter to index.php/apps/files/ajax/scan.php...
PT-2015-2581
Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 8.0.6 ownCloud Server versions 8.1.x prior to 8.1.1 Description The issue allows remote authenticated users to list directory contents and possibly cause a denial of service via a .. dot dot in the dir paramet...