Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2021-30598

Malicious code in bioql PyPI...

9.8CVSS9.4AI score0.00491EPSS
Exploits1References1
CNVD
CNVD
added 2021/12/01 12:0 a.m.11 views

Tripexpress path traversal vulnerability

Tripexpress is an open source bus tour travel booking management web application by Shpetim Islami, an Austrian individual developer. tripexpress suffers from a path traversal vulnerability, which originates from the assignment of $SERVERargv assigned to src, the lack of effective filtering and...

9.8CVSS3.9AI score0.00491EPSS
Exploits1References1
NVD
NVD
added 2021/11/29 4:15 p.m.6 views

CVE-2021-43691

tripexpress v1.1 is affected by a path manipulation vulnerability in file system/helpers/dompdf/loadfont.php. The variable src is coming from $SERVER"argv" then there is a path manipulation vulnerability...

9.8CVSS0.00491EPSS
Exploits1References1
OSV
OSV
added 2021/11/29 4:15 p.m.2 views

CVE-2021-43691

tripexpress v1.1 is affected by a path manipulation vulnerability in file system/helpers/dompdf/loadfont.php. The variable src is coming from $SERVER"argv" then there is a path manipulation vulnerability...

9.8CVSS5.7AI score0.00491EPSS
Exploits1References1
Prion
Prion
added 2021/11/29 4:15 p.m.10 views

Path traversal

tripexpress v1.1 is affected by a path manipulation vulnerability in file system/helpers/dompdf/loadfont.php. The variable src is coming from $SERVER"argv" then there is a path manipulation vulnerability...

7.5CVSS9.3AI score0.00491EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2021/11/29 3:4 p.m.32 views

CVE-2021-43691

Tripexpress v1.1 is affected by a path traversal vulnerability in file system/helpers/dompdf/load_font.php. The issue arises because the variable src is assigned from $_SERVER["argv"] (src coming from argv) and is not properly validated, enabling path manipulation. No remediation or patch details...

9.8CVSS9.4AI score0.00491EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/11/29 3:4 p.m.11 views

CVE-2021-43691

tripexpress v1.1 is affected by a path manipulation vulnerability in file system/helpers/dompdf/loadfont.php. The variable src is coming from $SERVER"argv" then there is a path manipulation vulnerability...

9.6AI score0.00491EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/11/29 12:0 a.m.1 views

Tripexpress 路径遍历漏洞

Tripexpress is an open source bus tour travel booking management web application by Shpetim Islami, an Austrian individual developer. tripexpress suffers from a path traversal vulnerability, which originates from the assignment of $SERVERargv assigned to src, the lack of effective filtering and...

9.8CVSS5.7AI score0.00491EPSS
Exploits1References2
Rows per page
Query Builder