Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2006-4538

Malware in sbrugna...

5CVSS6.4AI score0.00259EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2009-0039

Malware in sbrugna...

5CVSS6.1AI score0.00705EPSS
Exploits0References14
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-26263

Malware in sbrugna...

6.5CVSS5.6AI score0.00208EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2013-0516

Malware in sbrugna...

5.5CVSS6.4AI score0.00173EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2006-0282

Malware in sbrugna...

5CVSS6.4AI score0.02609EPSS
Exploits0References12
RedhatCVE
RedhatCVE
added 2025/05/22 10:9 a.m.4 views

CVE-2019-19992

An issue was discovered in Selesta Visual Access Manager VAM 4.15.0 through 4.29. A user with valid credentials is able to read XML files on the filesystem via the web interface. The PHP page /common/vameditXml.php doesn't check the parameter that identifies the file name to be read. Thus, an...

6.5CVSS6.7AI score0.00402EPSS
Exploits1References1
Prion
Prion
added 2020/02/26 4:15 p.m.8 views

Design/Logic Flaw

An issue was discovered in Selesta Visual Access Manager VAM 4.15.0 through 4.29. A user with valid credentials is able to read XML files on the filesystem via the web interface. The PHP page /common/vameditXml.php doesn't check the parameter that identifies the file name to be read. Thus, an...

4CVSS6.4AI score0.00402EPSS
Exploits1References3Affected Software1
RedHat Linux
RedHat Linux
added 2009/03/06 5:15 p.m.1 views

JBoss EAP unprivileged local xml file access

The request handler in JBossWS in JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.2 before 4.2.0.CP06 and 4.3 before 4.3.0.CP04 does not properly validate the resource path during a request for a WSDL file with a custom web-service endpoint, which allows remote attackers to read...

5CVSS5.9AI score0.00705EPSS
Exploits0References4
Cvelist
Cvelist
added 2003/04/02 5:0 a.m.24 views

CVE-2002-0648

The legacy data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to read arbitrary XML files, and portions of other files, via a URL whose "src" attribute redirects to a local file...

6.5AI score0.59276EPSS
Exploits0References9
Rows per page
Query Builder