Lucene search
+L

45 matches found

GithubExploit
GithubExploit
added 2025/03/31 1:43 p.m.398 views

Exploit for CVE-2025-30208

ViteVulScan Vulnerabilities Overview This project involves...

5.3CVSS6.6AI score0.74784EPSS
SaveExploits35
IBM Security Bulletins
IBM Security Bulletins
added 2024/07/18 1:49 p.m.25 views

Security Bulletin: There are multiple vulnerabilities that affect CICS Transaction Gateway Desktop Edition (CVE-2023-50310 and CVE-2023-50311).

Summary There are multiple vulnerabilities that affect CICS Transaction Gateway Desktop Edition. An update to CICS Transaction Gateway Desktop Edition has been released to address these vulnerabilities. Vulnerability Details CVEID:CVE-2023-50311 DESCRIPTION: IBM CICS Transaction Gateway could...

7.5CVSS5.2AI score0.00396EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/06/20 3:46 p.m.47 views

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to multiple vulnerabilities due to IBM CICS Transaction Gateway (CVE-2023-50310, CVE-2023-50311)

Summary IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to multiple vulnerabilities due to IBM CICS Transaction Gateway. This bulletin identifies the steps to take to address these vulnerabilities. Vulnerability Details CVEID:CVE-2023-50310 DESCRIPTION: IBM CICS...

7.5CVSS5.3AI score0.00396EPSS
SaveExploits0Affected Software2
Veracode
Veracode
added 2023/12/05 7:03 a.m.19 views

Information Disclosure

jupyterserver is vulnerable to Information Disclosure. An information disclosure flaw exists due to unhandled errors in API requests. While not directly allowing unauthorized access, these errors may leak sensitive path information in responses, potentially revealing sensitive server details to...

4.3CVSS6.1AI score0.00841EPSS
SaveExploits0References4Affected Software2
F5 Networks
F5 Networks
added 2023/02/21 7:27 p.m.46 views

K17453: Subversion vulnerabilities CVE-2015-0248, CVE-2015-0251, and CVE-2015-3187

Security Advisory Description CVE-2015-0248 The 1 moddavsvn and 2 svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of service assertion failure and abort via crafted parameter combinations related to dynamically evaluated revisi...

5CVSS7.3AI score0.1208EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2023/02/15 5:19 a.m.5 views

SUSE CVE-2015-3187

The svnrepostracenodelocations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used, allows remote authenticated users to obtain sensitive path information by reading the history of a node that has been moved from a hidden path...

4CVSS6.5AI score0.06378EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2021/04/14 1:27 p.m.25 views

CVE-2021-29262

When starting Apache Solr versions prior to 8.8.2, configured with the SaslZkACLProvider or VMParamsAllAndReadonlyDigestZkACLProvider and no existing security.json znode, if the optional read-only user is configured then Solr would not treat that node as a sensitive path and would allow it to be...

7.5CVSS4.3AI score0.07777EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2019/12/15 8:30 p.m.245 views

Nginx Log Check - Nginx Log Security Analysis Script

Nginx Log Security Analysis Script Features Statistics Top 20 Address SQL injection analysis Scanner alert analysis Exploit detection Sensitive path access File contains attack Webshell Find URLs with response length Top 20 Looking for rare script file access Find script file for 302 redirect Usa...

8.4AI score
SaveExploits0References1
CNVD
CNVD
added 2017/06/14 12:00 a.m.6 views

Schneider Electric U.motion Builder Error Message Path Vulnerability

U.motion Builder is a builder product from Schneider Electric France. An error message path vulnerability exists in Schneider Electric U.motion Builder. An exception message containing sensitive path information is returned to an attacker. This allows an attacker to exploit the vulnerability to...

7.6AI score
SaveExploits0References1
NVD
NVD
added 2015/08/12 2:59 p.m.20 views

CVE-2015-3187

The svnrepostracenodelocations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used, allows remote authenticated users to obtain sensitive path information by reading the history of a node that has been moved from a hidden path...

4CVSS7.6AI score0.06378EPSS
SaveExploits0References11
OSV
OSV
added 2015/08/12 2:59 p.m.16 views

CVE-2015-3187

The svnrepostracenodelocations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used, allows remote authenticated users to obtain sensitive path information by reading the history of a node that has been moved from a hidden path...

7AI score
SaveExploits0References11
Prion
Prion
added 2015/08/12 2:59 p.m.25 views

Path traversal

The svnrepostracenodelocations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used, allows remote authenticated users to obtain sensitive path information by reading the history of a node that has been moved from a hidden path...

4CVSS6.1AI score0.06378EPSS
SaveExploits0References11Affected Software2
Cvelist
Cvelist
added 2015/08/12 2:00 p.m.31 views

CVE-2015-3187

The svnrepostracenodelocations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used, allows remote authenticated users to obtain sensitive path information by reading the history of a node that has been moved from a hidden path...

7.5AI score0.06378EPSS
SaveExploits0References11
Debian CVE
Debian CVE
added 2015/08/12 2:00 p.m.41 views

CVE-2015-3187

The svnrepostracenodelocations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used, allows remote authenticated users to obtain sensitive path information by reading the history of a node that has been moved from a hidden path...

4CVSS7.4AI score0.06378EPSS
SaveExploits0
CVE
CVE
added 2015/08/12 2:00 p.m.121 views

CVE-2015-3187

CVE-2015-3187 affects Apache Subversion: the svn_repos_trace_node_locations function in Subversion before 1.7.21 and in 1.8.x before 1.8.14 can disclose sensitive path information. When path-based authorization is used, remote authenticated users could read the history of a node that has been mov...

4CVSS7.3AI score0.06378EPSS
SaveExploits0References11Affected Software1
UbuntuCve
UbuntuCve
added 2015/08/05 8:00 p.m.26 views

CVE-2015-3187

The svnrepostracenodelocations function in Apache Subversion before 1.7.21 and 1.8.x before 1.8.14, when path-based authorization is used, allows remote authenticated users to obtain sensitive path information by reading the history of a node that has been moved from a hidden path...

4CVSS6.8AI score0.06378EPSS
SaveExploits0References3
Prion
Prion
added 2014/02/14 3:55 p.m.23 views

Design/Logic Flaw

Unspecified vulnerability in the Portal WebDynPro in SAP NetWeaver allows remote attackers to obtain sensitive path information via unknown attack vectors...

5CVSS6.7AI score0.0209EPSS
SaveExploits0References5
Prion
Prion
added 2006/05/31 10:06 a.m.15 views

Improper access control

SiteScape Forum 7.2 and possibly earlier stores the avf.rc configuraiton file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive path information...

5CVSS7.2AI score0.01377EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2006/05/31 10:06 a.m.19 views

CVE-2006-2677

SiteScape Forum 7.2 and possibly earlier stores the avf.rc configuraiton file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive path information...

5CVSS6.6AI score0.01377EPSS
SaveExploits0References3
CVE
CVE
added 2006/05/31 10:00 a.m.49 views

CVE-2006-2677

CVE-2006-2677 affects SiteScape Forum 7.2 (and possibly earlier). The issue arises from storing the avf.rc configuration file under the web document root with insufficient access controls, which allows remote attackers to obtain sensitive path information. The publicly available records describe ...

5CVSS6.7AI score0.01377EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder