Lucene search
K

10 matches found

NVD
NVD
added 2024/04/12 2:15 p.m.6 views

CVE-2024-3707

Information exposure vulnerability in OpenGnsys affecting version 1.1.1d Espeto. This vulnerability allows an attacker to enumerate all files in the web tree by accessing a php file...

5.3CVSS5.1AI score0.00303EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/04/12 1:52 p.m.11 views

CVE-2024-3707 Exposure of Information Through Directory Listing vulnerability in OpenGnsys

Information exposure vulnerability in OpenGnsys affecting version 1.1.1d Espeto. This vulnerability allows an attacker to enumerate all files in the web tree by accessing a php file...

5.3CVSS5.5AI score0.00303EPSS
Exploits0References2
CVE
CVE
added 2024/04/12 1:52 p.m.42 views

CVE-2024-3707

OpenGnsys version 1.1.1d (Espeto) is affected by CVE-2024-3707, an information exposure vulnerability in the web interface that allows an attacker to enumerate all files in the web tree by accessing a PHP file. The issue is described as a directory-listing / information disclosure flaw in OpenGns...

5.3CVSS5.1AI score0.00303EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2023/01/27 9:15 p.m.13 views

CVE-2019-25053

A path traversal vulnerability exists in Sage FRP 1000 before November 2019. This allows remote unauthenticated attackers to access files outside of the web tree via a crafted URL...

7.5CVSS7.5AI score0.00789EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/01/27 12:0 a.m.11 views

CVE-2019-25053

A path traversal vulnerability exists in Sage FRP 1000 before November 2019. This allows remote unauthenticated attackers to access files outside of the web tree via a crafted URL...

7.5AI score0.00789EPSS
Exploits0References1
CVE
CVE
added 2023/01/27 12:0 a.m.47 views

CVE-2019-25053

Sage FRP 1000 is affected by a path traversal vulnerability reported for versions before November 2019. An attacker can exploit a crafted URL to access files outside the web root without authentication. The provided documents do not specify the exact root cause details beyond path traversal, nor ...

7.5CVSS7.4AI score0.00789EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2020/11/17 9:15 p.m.0 views

CVE-2020-26553

An issue was discovered in Aviatrix Controller before R6.0.2483. Several APIs contain functions that allow arbitrary files to be uploaded to the web tree...

9.8CVSS7.4AI score
Exploits0References1
NVD
NVD
added 2020/11/17 9:15 p.m.9 views

CVE-2020-26553

An issue was discovered in Aviatrix Controller before R6.0.2483. Several APIs contain functions that allow arbitrary files to be uploaded to the web tree...

9.8CVSS9.5AI score0.00841EPSS
Exploits1References1
Prion
Prion
added 2020/11/17 9:15 p.m.13 views

Design/Logic Flaw

An issue was discovered in Aviatrix Controller before R6.0.2483. Several APIs contain functions that allow arbitrary files to be uploaded to the web tree...

7.5CVSS9.3AI score0.00841EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2020/11/17 8:59 p.m.9 views

CVE-2020-26553

An issue was discovered in Aviatrix Controller before R6.0.2483. Several APIs contain functions that allow arbitrary files to be uploaded to the web tree...

9.5AI score0.00841EPSS
Exploits1References1
Rows per page
Query Builder