Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 08:46:25 +0000 EUVD-2026-54130 https://cve.radiocsirt.org/vuln/euvd-2026-54130 EUVD-2026-54130 https://cve.radiocsirt.org/vuln/euvd-2026-54130 fkie_cve-2019-11029 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11029 <p>Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Download() method of AutoUpdateService in SMServer.exe, leading to Directory Traversal. An attacker could use ..\ with this method to iterate over lists of interesting system files and download them without previous authentication. This includes SAM-database backups, Web.config files, etc. and might cause a serious impact on confidentiality.</p> <p>Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Download() method of AutoUpdateService in SMServer.exe, leading to Directory Traversal. An attacker could use ..\ with this method to iterate over lists of interesting system files and download them without previous authentication. This includes SAM-database backups, Web.config files, etc. and might cause a serious impact on confidentiality.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-11029 GHSA-p289-qj29-2fvp https://cve.radiocsirt.org/vuln/ghsa-p289-qj29-2fvp <p>Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Download() method of AutoUpdateService in SMServer.exe, leading to Directory Traversal. An attacker could use ..\ with this method to iterate over lists of interesting system files and download them without previous authentication. This includes SAM-database backups, Web.config files, etc. and might cause a serious impact on confidentiality.</p> <p>Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Download() method of AutoUpdateService in SMServer.exe, leading to Directory Traversal. An attacker could use ..\ with this method to iterate over lists of interesting system files and download them without previous authentication. This includes SAM-database backups, Web.config files, etc. and might cause a serious impact on confidentiality.</p> https://cve.radiocsirt.org/vuln/ghsa-p289-qj29-2fvp gsd-2019-11029 https://cve.radiocsirt.org/vuln/gsd-2019-11029 gsd-2019-11029 https://cve.radiocsirt.org/vuln/gsd-2019-11029