Lucene search
+L

53 matches found

Check Point Advisories
Check Point Advisories
•added 2020/05/27 12:00 a.m.•5 views

HTTP Suspicious Windows Paths

Windows contains important operating system files and sensitive data. A remote attacker may create a malicious HTTP request to obtain sensitive information...

1.2AI score
SaveExploits0
Veracode
Veracode
•added 2019/10/18 8:16 a.m.•28 views

Server-Side Request Forgery (SSRF)

wordpress is vulnerable to server-side request forgery SSRF. Windows paths are mishandled when validating certain relative URLs, allowing the bypass of the URL redirection validation...

9.8CVSS3.1AI score0.0451EPSS
SaveExploits0References8Affected Software2
OSV
OSV
•added 2019/10/17 1:15 p.m.•5 views

DEBIAN-CVE-2019-17670

WordPress before 5.2.4 has a Server Side Request Forgery SSRF vulnerability because Windows paths are mishandled during certain validation of relative URLs...

9.8CVSS8.3AI score0.0451EPSS
SaveExploits0References1
NVD
NVD
•added 2019/10/17 1:15 p.m.•19 views

CVE-2019-17670

WordPress before 5.2.4 has a Server Side Request Forgery SSRF vulnerability because Windows paths are mishandled during certain validation of relative URLs...

9.8CVSS9.6AI score0.0451EPSS
SaveExploits0References8
OSV
OSV
•added 2019/10/17 1:15 p.m.•29 views

CVE-2019-17670

WordPress before 5.2.4 has a Server Side Request Forgery SSRF vulnerability because Windows paths are mishandled during certain validation of relative URLs...

9.8CVSS7.2AI score
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2019/10/17 1:15 p.m.•35 views

CVE-2019-17670

WordPress before 5.2.4 has a Server Side Request Forgery SSRF vulnerability because Windows paths are mishandled during certain validation of relative URLs...

9.8CVSS7.2AI score0.0451EPSS
SaveExploits0References6
Prion
Prion
•added 2019/10/17 1:15 p.m.•30 views

Server side request forgery (ssrf)

WordPress before 5.2.4 has a Server Side Request Forgery SSRF vulnerability because Windows paths are mishandled during certain validation of relative URLs...

7.5CVSS9.4AI score0.0451EPSS
SaveExploits0References8Affected Software2
OSV
OSV
•added 2019/10/17 1:15 p.m.•16 views

UBUNTU-CVE-2019-17670

WordPress before 5.2.4 has a Server Side Request Forgery SSRF vulnerability because Windows paths are mishandled during certain validation of relative URLs...

9.8CVSS7.3AI score0.0451EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2019/10/17 12:00 a.m.•56 views

CVE-2019-17670

WordPress before 5.2.4 has a Server Side Request Forgery SSRF vulnerability because Windows paths are mishandled during certain validation of relative URLs...

9.5AI score0.0451EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/17 12:00 a.m.•1 views

CVE-2019-17670: Server-Side Request Forgery (SSRF)

WordPress before 5.2.4 has a Server Side Request Forgery SSRF vulnerability because Windows paths are mishandled during certain validation of relative URLs...

9.8CVSS8AI score0.0451EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/10/17 12:00 a.m.•15 views

PT-2019-15248 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.2.4 Description: The issue is related to a Server Side Request Forgery SSRF vulnerability. This occurs because Windows paths are mishandled during certain validation of relative URLs. Recommendations: For version...

9.8CVSS6.4AI score0.36503EPSS
SaveExploits3References39
CNVD
CNVD
•added 2019/07/29 12:00 a.m.•37 views

Pallets Werkzeug Path Traversal Vulnerability

Pallets Werkzeug is a WSGI Web application library. A path traversal vulnerability in Pallets Werkzeug prior to version 0.15.5, which stems from SharedDataMiddleware's failure to correctly handle driver names in Windows path names e.g., C:, can be exploited by an attacker to access arbitrary file...

7.5CVSS8.6AI score0.55803EPSS
SaveExploits7References1
Positive Technologies
Positive Technologies
•added 2018/06/07 12:00 a.m.•9 views

PT-2018-16156 · Node · Resolve-Path

Name of the Vulnerable Software and Affected Versions: resolve-path versions prior to 1.4.0 Description: The issue arises from a lack of validation of paths containing certain special characters in the resolve-path node module, allowing a malicious user to read the content of any file with a know...

7.5CVSS7.4AI score0.0241EPSS
SaveExploits1References7
Rows per page
Query Builder