Lucene search
+L

2246 matches found

CNNVD
CNNVD
added 2025/12/10 12:00 a.m.9 views

Tecno AudioLink 安全漏洞

Tecno AudioLink is an audio linking software in cell phones from the Chinese company Tecno. A security vulnerability exists in Tecno AudioLink, which stems from insufficient protection of the AudioLink component service and could allow a local attacker to overwrite system files...

5.3CVSS6.4AI score0.00211EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/10 12:00 a.m.11 views

PT-2025-50303

Unprotected service in the AudioLink component allows a local attacker to overwrite system files via unauthorized service invocation...

10CVSS6.6AI score0.00211EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/09 9:31 p.m.10 views

EUVD-2021-34724

STVS ProVision 5.9.10 contains a path traversal vulnerability that allows authenticated attackers to access arbitrary files by manipulating the files parameter in the archive download functionality. Attackers can send GET requests to /archive/download with directory traversal sequences to read...

7.1CVSS6.2AI score0.00769EPSS
SaveExploits1References5
NVD
NVD
added 2025/12/09 9:15 p.m.11 views

CVE-2023-53772

MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device...

8.7CVSS0.0096EPSS
SaveExploits1References4
NVD
NVD
added 2025/12/09 9:15 p.m.11 views

CVE-2021-47724

STVS ProVision 5.9.10 contains a path traversal vulnerability that allows authenticated attackers to access arbitrary files by manipulating the files parameter in the archive download functionality. Attackers can send GET requests to /archive/download with directory traversal sequences to read...

7.1CVSS0.00769EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2025/12/09 8:27 a.m.20 views

CVE-2025-14253

Vitals ESP developed by Galaxy Software Services has an Arbitrary File Read vulnerability, allowing privileged remote attackers to exploit Absolute Path Traversal to download arbitrary system files...

6.9CVSS7.1AI score0.00484EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.12 views

PT-2025-50269

Name of the Vulnerable Software and Affected Versions MiniDVBLinux version 5.4 Description MiniDVBLinux version 5.4 contains a flaw that allows attackers to read sensitive system files. This is possible through the 'file' GET parameter on the about page, enabling disclosure of arbitrary file...

8.7CVSS6.2AI score0.0096EPSS
SaveExploits1References8
NVD
NVD
added 2025/11/28 8:15 a.m.16 views

CVE-2025-13771

WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

7.1CVSS0.00452EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/11/28 7:49 a.m.13 views

EUVD-2025-199863

WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

7.1CVSS6.6AI score0.00452EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/11/28 12:00 a.m.14 views

PT-2025-48322

Name of the Vulnerable Software and Affected Versions WebITR affected versions not specified Description WebITR, developed by Uniong, contains an Arbitrary File Read issue stemming from Relative Path Traversal. Authenticated remote attackers can exploit this to download arbitrary system files. Th...

7.1CVSS6.5AI score0.00452EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2025/11/28 12:00 a.m.13 views

Uniong WebITR 安全漏洞

Uniong WebITR is an online time and attendance system from China Kaifa Uniong. A security vulnerability exists in Uniong WebITR that originates from relative path traversal and allows remote attackers to download arbitrary system files...

7.1CVSS6.9AI score0.00452EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/11/26 3:30 a.m.12 views

EUVD-2025-199678

Unauthenticated Arbitrary File Deletion upgradecontents.php in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform The deleteupgrade parameter allows unauthenticated deletion of arbitrary...

7.8CVSS6.7AI score0.00383EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/11/26 12:00 a.m.14 views

DB Electronica Mozart FM Transmitter 安全漏洞

The DB Electronica Mozart FM Transmitter is a line of professional-grade FM radio transmitters from the Italian company DB Electronica. A security vulnerability exists in DB Electronica Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, and 7000 that originates fr...

9.1CVSS6.8AI score0.00383EPSS
SaveExploits1References2
CVE
CVE
added 2025/11/14 3:05 a.m.35 views

CVE-2025-13161

IQ-Support (IQ Service International) is affected by CVE-2025-13161, describing an Unauthenticated Arbitrary File Read via Relative Path Traversal that allows downloading arbitrary system files. The available connected documents identify the vulnerable component as IQ-Support but do not specify a...

8.7CVSS6.9AI score0.00536EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/11/14 3:05 a.m.12 views

EUVD-2025-180548

IQ-Support developed by IQ Service International has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

8.7CVSS6.8AI score0.00536EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/11/14 12:00 a.m.12 views

IQ Service IQ-Support 安全漏洞

IQ Service IQ-Support is an intelligent customer service system from IQ Service, Inc. of Taiwan, China. A security vulnerability exists in IQ Service IQ-Support that originates from relative path traversal and could allow an unauthenticated, remote attacker to download arbitrary system files...

8.7CVSS6.8AI score0.00536EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/14 12:00 a.m.23 views

PT-2025-46939

Name of the Vulnerable Software and Affected Versions IQ-Support affected versions not specified Description IQ-Support, developed by IQ Service International, has an Arbitrary File Read issue. Unauthenticated remote attackers can exploit Relative Path Traversal to download arbitrary system files...

8.7CVSS6.7AI score0.00536EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2025/11/07 3:10 p.m.20 views

CVE-2025-58463 Download Station

A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following...

6.3CVSS0.00466EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/05 4:31 p.m.44 views

CVE-2025-20374

Technical details about CVE-2025-20374 are not publicly provided in the connected documents. Please monitor for updates from Cisco and Red Hat advisories for affected products, impact scope, and remediation.

4.9CVSS6.6AI score0.01059EPSS
SaveExploits0References1Affected Software1
CISA KEV Catalog
CISA KEV Catalog
added 2025/11/04 12:00 a.m.48 views

Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability

Gladinet CentreStack and Triofox contains a files or directories accessible to external parties vulnerability that allows unintended disclosure of system files...

7.5CVSS6.8AI score0.92137EPSS
SaveIn wildExploits4
Rows per page
Query Builder