Total
3 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2023-1034 | 1 Salesagility | 1 Suitecrm | 2023-03-06 | N/A | 8.8 HIGH |
Path Traversal: '\..\filename' in GitHub repository salesagility/suitecrm prior to 7.12.9. | |||||
CVE-2023-0316 | 1 Froxlor | 1 Froxlor | 2023-01-24 | N/A | 5.5 MEDIUM |
Path Traversal: '\..\filename' in GitHub repository froxlor/froxlor prior to 2.0.0. | |||||
CVE-2022-2788 | 1 Emerson | 1 Electric\'s Proficy | 2022-08-24 | N/A | 7.3 HIGH |
Emerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: '\..\Filename', also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file can transfer through the engineering station onto Windows in a way that executes the malicious code. |