Lucene search
+L

67 matches found

OSV
OSV
added 2020/11/18 7:15 p.m.7 views

CVE-2020-28574

A unauthenticated path traversal arbitrary remote file deletion vulnerability in Trend Micro Worry-Free Business Security 10 SP1 could allow an unauthenticated attacker to exploit the vulnerability and modify or delete arbitrary files on the product's management console...

7.5CVSS7.3AI score0.02773EPSS
SaveExploits1References2
CVE
CVE
added 2020/05/07 8:31 p.m.73 views

CVE-2020-10794

Gira TKS-IP-Gateway 4.0.7.7 is affected by an unauthenticated path traversal vulnerability that lets an attacker download the application database. This CVE (CVE-2020-10794) is linked to CVE-2020-10795, which describes authenticated remote code execution via the backup web frontend and could enab...

9.8CVSS7.2AI score0.01446EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/08/16 12:0 a.m.421 views

Pulse Secure Pulse Connect Secure SSL VPN Unauthenticated Path Traversal (CVE-2019-11510)

Binary data pulseconnectsecurepathtraversal.nbin...

10CVSS9AI score0.99999EPSS
SaveExploits22References4
OpenVAS
OpenVAS
added 2019/03/12 12:0 a.m.82 views

CMS Made Simple < 2.2.10 Multiple Vulnerabilities

CMS Made Simple is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.2AI score0.45896EPSS
SaveExploits11References1
WPVulnDB
WPVulnDB
added 2017/10/20 12:0 a.m.56 views

Multiple Plugins - jQueryFileTree - Unauthenticated Path Traversal

Since no authentication or authorisation checks for direct access to the jqueryFileTree.php are made, the vulnerability allows for browsing the file system on a host out of an unauthenticated context. Even though no file content can be exfiltrated this way, "hidden" files e.g. in the web...

5CVSS2AI score0.59063EPSS
SaveExploits7References3Affected Software2
WPVulnDB
WPVulnDB
added 2017/05/11 12:0 a.m.25 views

Delightful Downloads <= 1.6.6 - Unauthenticated Path Traversal

Since no authentication or authorisation checks for direct access to the jqueryFileTree.php are made, the vulnerability allows for browsing the file system on a host out of an unauthenticated context. Even though no file content can be exfiltrated this way, "hidden" files e.g. in the web...

5CVSS0.9AI score0.59063EPSS
SaveExploits7References1Affected Software1
Exploit DB
Exploit DB
added 2015/10/05 12:0 a.m.33 views

ManageEngine ServiceDesk Plus 9.1 build 9110 - Directory Traversal

Exploit Title: ManageEngine ServiceDesk Plus Product Description ------------------- ServiceDesk Plus is an ITIL ready IT help desk software for organizations of all sizes. With advanced ITSM functionality and easy-to-use capability, ServiceDesk Plus helps IT support teams deliver world-class...

5.3AI score
SaveExploits0
Rows per page
Query Builder