All CVEs — page 323 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The WookTeam application is vulnerable to directory traversal in its project task export feature, allowing attackers to read arbitrary files from the server by crafting a malicious JSON payload that escapes the intended storage directory.
Unimall v4 allows attackers to perform directory traversal during file uploads, enabling them to write arbitrary files to the server's filesystem and potentially execute code. This vulnerability exists in the FileUploadController.local() method and can be exploited without authentication.
The flaw allows any network-reachable attacker to execute arbitrary system commands via the H2 Console due to lack of authentication, posing a critical risk.
The vulnerability allows a remote user to bypass validation checks in HPE iLO 7 firmware, potentially gaining unauthorized access to managed servers.
The flaw is a Server-Side Request Forgery (SSRF) vulnerability in the Progress @progress/sitefinity-nextjs-sdk npm package, allowing remote attackers to make server-side requests to attacker-controlled hosts, potentially exposing sensitive information.
The flaw in n/a versions of Progress® Telerik® Fiddler® Classic for Windows allows a local attacker with low privileges to replace a helper tool with a maliciously crafted binary, leading to privilege escalation and execution of unintended code.