Lucene search
K

26 matches found

ATTACKERKB
ATTACKERKB
added 2022/03/29 6:0 p.m.2 views

CVE-2022-23794

An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Uploading a file name of an excess length causes the error. This error brings up the screen with the path of the source code of the web application...

5.3CVSS6.1AI score0.00871EPSS
Exploits0References2Affected Software2
RedHat Linux
RedHat Linux
added 2021/12/01 12:28 p.m.4 views

jenkins: The operations FilePath#renameTo and FilePath#moveAllChildrenTo only check read permission on the source path

An incorrect permissions validation vulnerability was found in Jenkins. The operations FilePathrenameTo and FilePathmoveAllChildrenTo only check read permission on the source path which may allow an attacker who has access to these operations to be able to read and write to arbitrary files on the...

9.8CVSS5.8AI score0.02034EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2021/11/30 9:11 a.m.5 views

jenkins: The operations FilePath#renameTo and FilePath#moveAllChildrenTo only check read permission on the source path

An incorrect permissions validation vulnerability was found in Jenkins. The operations FilePathrenameTo and FilePathmoveAllChildrenTo only check read permission on the source path which may allow an attacker who has access to these operations to be able to read and write to arbitrary files on the...

9.8CVSS5.8AI score0.02034EPSS
Exploits0References5
Prion
Prion
added 2021/11/04 5:15 p.m.17 views

Server side request forgery (ssrf)

FilePathrenameTo and FilePathmoveAllChildrenTo in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier only check 'read' agent-to-controller access permission on the source path, instead of 'delete'...

7.5CVSS9.2AI score0.02034EPSS
Exploits0References1Affected Software1
Packet Storm
Packet Storm
added 2014/03/12 12:0 a.m.47 views

Mediawiki 1.18.0 Information Disclosure

CVE-2014-1686 -- Information disclosure: webserver source path in Mediawiki 1.18.0 When a user create a new file eg: image with a name containing , it leads to webserver file path disclosure, after having uploaded the file, when thumbail creation occurs. I did not succeed in obtained remote shell...

5.4AI score0.02145EPSS
Exploits1
seebug.org
seebug.org
added 2007/09/28 12:0 a.m.27 views

PhFiTo 1.3.0 (SRC_PATH) Remote File Inclusion Vulnerability

No description provided by source. ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...

7.1AI score
Exploits0
Rows per page
Query Builder