CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

107 matches found

NVD•added 2020/03/25 6:15 p.m.•28 views

CVE-2020-5280

http4s before versions 0.18.26, 0.20.20, and 0.21.2 has a local file inclusion vulnerability. This vulnerability applies to all users of org.http4s.server.staticcontent.FileService, org.http4s.server.staticcontent.ResourceService and org.http4s.server.staticcontent.WebjarService. URI normalizatio...

7.6CVSS7.2AI score0.06985EPSS

SaveExploits0References4

OSV•added 2020/03/25 6:15 p.m.•23 views

CVE-2020-5280

7.5CVSS7.3AI score

SaveExploits0References4

Prion•added 2020/03/25 6:15 p.m.•26 views

Design/Logic Flaw

5CVSS7.2AI score0.06985EPSS

SaveExploits0References4Affected Software1

attackerkb•added 2020/03/25 6:15 p.m.•10 views

CVE-2020-5280

7.6CVSS7.3AI score0.06985EPSS

SaveExploits0References5Affected Software1

Cvelist•added 2020/03/25 5:45 p.m.•41 views

CVE-2020-5280 Local file inclusion vulnerability in http4s

7.6CVSS7.2AI score0.06985EPSS

SaveExploits0References4

Prion•added 2018/03/19 1:29 p.m.•24 views

Directory traversal

The Grails Resource Plugin often has to exchange URIs for resources with other internal components. Those other components will decode any URI passed to them. To protect against directory traversal the Grails Resource Plugin did the following: normalized the URI, checked the normalized URI did no...

5CVSS7.1AI score0.01684EPSS

SaveExploits0References1Affected Software1

Exploit DB•added 2015/01/13 12:00 a.m.•43 views

Lexmark MarkVision Enterprise - Arbitrary File Upload (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Lexmark MarkVision Enterprise Arbitrary File Upload', 'Description' = %q This module exploits a code execution flaw in Lexmark...

10CVSS8.3AI score0.77198EPSS

SaveExploits6

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by