2648 matches found
CVE-2024-20348
A vulnerability in the Out-of-Band OOB Plug and Play PnP feature of Cisco Nexus Dashboard Fabric Controller NDFC could allow an unauthenticated, remote attacker to read arbitrary files. This vulnerability is due to an unauthenticated provisioning web server. An attacker could exploit this...
CVE-2024-20348
CVE-2024-20348 affects Cisco Nexus Dashboard Fabric Controller (NDFC) and its Out-of-Band Plug and Play (PnP) feature. The issue arises from an unauthenticated provisioning web server, enabling an unauthenticated, remote attacker to read arbitrary files in the PnP container. Impact is read access...
Cisco Nexus Dashboard Fabric Controller Plug and Play Arbitrary File Read Vulnerability
A vulnerability in the Out-of-Band OOB Plug and Play PnP feature of Cisco Nexus Dashboard Fabric Controller NDFC could allow an unauthenticated, remote attacker to read arbitrary files. This vulnerability is due to an unauthenticated provisioning web server. An attacker could exploit this...
CVE-2023-49981
A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization...
CVE-2023-49979
A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...
CVE-2023-49980
A directory listing vulnerability in Best Student Result Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization...
CVE-2023-49979
A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files within the application without requiring authorization...
CVE-2023-49981
A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization...
CVE-2023-49980
A directory listing vulnerability in Best Student Result Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization...
Customer Support System 安全漏洞
Customer Support System is a customer support system by oretnom23 Individual Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. A security vulnerability exists in the v1 version of Customer Support System, which...
School Fees Management System 安全漏洞
School Fees Management System is a tuition management system. A security vulnerability exists in School Fees Management System v1.0, which stems from a logical flaw in the directory listing that allows unrestricted listing of directories and sensitive files in the program...
Adobe ColdFusion Access Control Error Vulnerability (CNVD-2024-21156)
Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion suffers from an Access Control Error vulnerability, which arises from the presence of...
Best Student Result Management System 安全漏洞
Best Student Result Management System is a student result management system by Mayuri K. Individual developer. A security vulnerability exists in Best Student Result Management System v1.0, which stems from a logical flaw in the directory listing that allows unrestricted listing of directories an...
CVE-2024-2442
Franklin Fueling System EVO 550 and EVO 5000 are vulnerable to a Path Traversal vulnerability that could allow an attacker to access sensitive files on the system...
CVE-2024-2442 Path Traversal vulnerability in Franklin Fueling System EVO 550/5000
Franklin Fueling System EVO 550 and EVO 5000 are vulnerable to a Path Traversal vulnerability that could allow an attacker to access sensitive files on the system...
PT-2024-20390 · Franklin Fueling Systems · Franklin Fueling Systems Ts-550 Evo +1
Name of the Vulnerable Software and Affected Versions: Franklin Fueling System EVO 550 affected versions not specified Franklin Fueling System EVO 5000 affected versions not specified Description: The issue is related to a Path Traversal vulnerability that could allow an attacker to access...
CVE-2024-20767
ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify restricted files. Exploitation of this issue does not require user interactio...
CVE-2024-2294 Backuply – Backup, Restore, Migrate and Clone <= 1.2.7 - Authenticated (Admin+) Directory Traversal
The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2.7 via the backupname parameter in the backuplydownloadbackup function. This makes it possible for attackers to have an account with only...
Security Bulletin: Google Guava vulnerability in Apache Solr and Logstash bundled with IBM Operations Analytics - Log Analysis (CVE-2023-2976)
Summary There is an information disclosure vulnerability in Google Guava that is used by Apache Solr and Logstash. This has been addressed Vulnerability Details CVEID:CVE-2023-2976 DESCRIPTION: Google Guava could allow a local authenticated attacker to obtain sensitive information, caused by a fl...
