Lucene search
+L

2224 matches found

OSV
OSV
added 2026/01/22 9:15 a.m.10 views

CVE-2026-1330

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

7.5CVSS6AI score0.00608EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/22 8:29 a.m.35 views

CVE-2026-1330 HAMASTAR Technology|MeetingHub - Arbitrary File Read

MeetingHub developed by HAMASTAR Technology has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

8.7CVSS0.00608EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.19 views

PT-2026-3921

Name of the Vulnerable Software and Affected Versions MeetingHub affected versions not specified Description MeetingHub developed by HAMASTAR Technology has an Arbitrary File Read issue. Unauthenticated remote attackers can exploit Absolute Path Traversal to download arbitrary system files. The...

8.7CVSS6AI score0.00608EPSS
SaveExploits0References8
NVD
NVD
added 2026/01/21 6:16 p.m.9 views

CVE-2021-47850

Mini Mouse 9.2.0 contains a path traversal vulnerability that allows remote attackers to access arbitrary system files and directories through crafted HTTP requests. Attackers can retrieve sensitive files like win.ini and list contents of system directories such as C:\Users\Public by manipulating...

8.7CVSS0.012EPSS
SaveExploits1References3
OSV
OSV
added 2026/01/21 6:16 p.m.6 views

CVE-2021-47850

Mini Mouse 9.2.0 contains a path traversal vulnerability that allows remote attackers to access arbitrary system files and directories through crafted HTTP requests. Attackers can retrieve sensitive files like win.ini and list contents of system directories such as C:\Users\Public by manipulating...

7.5CVSS5.9AI score0.012EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/01/21 5:27 p.m.25 views

CVE-2021-47850 Mini Mouse 9.2.0 - Path Traversal

Mini Mouse 9.2.0 contains a path traversal vulnerability that allows remote attackers to access arbitrary system files and directories through crafted HTTP requests. Attackers can retrieve sensitive files like win.ini and list contents of system directories such as C:\Users\Public by manipulating...

8.7CVSS0.012EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/01/21 5:27 p.m.5 views

CVE-2021-47850 Mini Mouse 9.2.0 - Path Traversal

Mini Mouse 9.2.0 contains a path traversal vulnerability that allows remote attackers to access arbitrary system files and directories through crafted HTTP requests. Attackers can retrieve sensitive files like win.ini and list contents of system directories such as C:\Users\Public by manipulating...

8.7CVSS5.7AI score0.012EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/01/21 5:27 p.m.4 views

CVE-2021-47850

Mini Mouse 9.2.0 contains a path traversal vulnerability that allows remote attackers to access arbitrary system files and directories through crafted HTTP requests. Attackers can retrieve sensitive files like win.ini and list contents of system directories such as C:\Users\Public by manipulating...

8.7CVSS5.6AI score0.012EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
added 2026/01/21 5:27 p.m.8 views

EUVD-2026-3610

Mini Mouse 9.2.0 contains a path traversal vulnerability that allows remote attackers to access arbitrary system files and directories through crafted HTTP requests. Attackers can retrieve sensitive files like win.ini and list contents of system directories such as C:\Users\Public by manipulating...

8.7CVSS5.7AI score0.012EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2026/01/21 12:0 a.m.9 views

Yodinfo Mini Mouse path traversal vulnerability

Yodinfo Mini Mouse is a mobile remote control application developed by Yodinfo in China. The version 9.2.0 of Yodinfo Mini Mouse contains a path traversal vulnerability. This vulnerability arises due to specially crafted HTTP requests that allow for path traversal, potentially leading to access t...

8.7CVSS6AI score0.012EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2026/01/20 9:7 a.m.22 views

CVE-2025-29847

A vulnerability in Apache Linkis. Problem Description When using the JDBC engine and da When using the JDBC engine and data source functionality, if the URL parameter configured on the frontend has undergone multiple rounds of URL encoding, it may bypass the system's checks. This bypass can trigg...

7.5CVSS5.5AI score0.00744EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/15 3:52 p.m.1 views

CVE-2021-47755

Oliver Library Server v5 contains a file download vulnerability that allows unauthenticated attackers to access arbitrary system files through unsanitized input in the FileServlet endpoint. Attackers can exploit the vulnerability by manipulating the 'fileName' parameter to download sensitive file...

8.7CVSS5.7AI score0.00753EPSS
SaveExploits1References2Affected Software1
EUVD
EUVD
added 2026/01/15 3:52 p.m.4 views

EUVD-2026-2777

Oliver Library Server v5 contains a file download vulnerability that allows unauthenticated attackers to access arbitrary system files through unsanitized input in the FileServlet endpoint. Attackers can exploit the vulnerability by manipulating the 'fileName' parameter to download sensitive file...

9.8CVSS6.5AI score0.00753EPSS
SaveExploits1References4
Snyk
Snyk
added 2026/01/13 11:52 p.m.19 views

PHP Remote File Inclusion

Overview mpdf/mpdf is a PHP library generating PDF files from UTF-8 encoded HTML. Affected versions of this package are vulnerable to PHP Remote File Inclusion via the annotation file parameters. An attacker can access arbitrary system files by supplying crafted annotation content containing file...

8.7CVSS7.1AI score0.00471EPSS
SaveExploits1References2
CVE
CVE
added 2026/01/13 10:51 p.m.26 views

CVE-2022-50932

CVE-2022-50932 affects Kyocera Command Center RX ECOSYS M2035dn. A directory traversal flaw on the /js/ path allows unauthenticated attackers to read sensitive files (e.g., /etc/passwd, /etc/shadow) by crafting traversal strings (including null-byte variants). Reported exploitation exists (e.g., ...

8.7CVSS6.6AI score0.03534EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/13 10:51 p.m.4 views

CVE-2022-50897 mPDF 7.0 - Local File Inclusion

mPDF 7.0 contains a local file inclusion vulnerability that allows attackers to read arbitrary system files by manipulating annotation file parameters. Attackers can generate URL-encoded or base64 payloads to include local files through crafted annotation content with file path specifications...

8.7CVSS6.2AI score0.00471EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/01/13 12:0 a.m.10 views

PT-2026-2408

Name of the Vulnerable Software and Affected Versions Kyocera Command Center RX ECOSYS M2035dn affected versions not specified Description The Kyocera Command Center RX ECOSYS M2035dn device contains a directory traversal flaw. Unauthenticated attackers can read sensitive system files by...

8.7CVSS6.4AI score0.03534EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2026/01/13 12:0 a.m.3 views

mPDF 安全漏洞

mPDF is mPDF open source a library written in PHP for the use of HTML to PDF file conversion . mPDF version 7.0 there is a security vulnerability , the vulnerability stems from the annotation file parameters exist in the local file contains a vulnerability , which may lead to read arbitrary syste...

8.7CVSS5.9AI score0.00471EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/01/13 12:0 a.m.20 views

Kyocera Command Center RX 路径遍历漏洞

Kyocera Command Center RX is a centralized printer management tool from Kyocera, Japan. The product is primarily used to manage and monitor printers on a local area network LAN. A path traversal vulnerability exists in Kyocera Command Center RX that stems from the presence of directory traversal,...

8.7CVSS7.3AI score0.03534EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2026/01/09 12:36 p.m.14 views

CVE-2023-49110

When the Kiuwan Local Analyzer uploads the scan results to the Kiuwan SAST web application either on-premises or cloud/SaaS solution, the transmitted data consists of a ZIP archive containing several files, some of them in the XML file format. During Kiuwan's server-side processing of these XML...

7.2CVSS7.6AI score0.0082EPSS
SaveExploits1References1
Rows per page
Query Builder