https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 11:53:31 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-137104 EUVD-2026-137104 https://cve.radiocsirt.org/vuln/euvd-2026-137104 https://cve.radiocsirt.org/vuln/fkie_cve-2007-5278 <p>Zomplog 3.8.1 and earlier stores potentially sensitive information under the web root with insufficient access control, which allows remote attackers to download files that were uploaded by users, as demonstrated by obtaining a directory listing via a direct request to /upload and then retrieving individual files. NOTE: in a non-default configuration, the directory listing is denied, but filenames may be predicable.</p> <p>Zomplog 3.8.1 and earlier stores potentially sensitive information under the web root with insufficient access control, which allows remote attackers to download files that were uploaded by users, as demonstrated by obtaining a directory listing via a direct request to /upload and then retrieving individual files. NOTE: in a non-default configuration, the directory listing is denied, but filenames may be predicable.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2007-5278 https://cve.radiocsirt.org/vuln/ghsa-j7gx-8j2c-q46q <p>Zomplog 3.8.1 and earlier stores potentially sensitive information under the web root with insufficient access control, which allows remote attackers to download files that were uploaded by users, as demonstrated by obtaining a directory listing via a direct request to /upload and then retrieving individual files. NOTE: in a non-default configuration, the directory listing is denied, but filenames may be predicable.</p> <p>Zomplog 3.8.1 and earlier stores potentially sensitive information under the web root with insufficient access control, which allows remote attackers to download files that were uploaded by users, as demonstrated by obtaining a directory listing via a direct request to /upload and then retrieving individual files. NOTE: in a non-default configuration, the directory listing is denied, but filenames may be predicable.</p> https://cve.radiocsirt.org/vuln/ghsa-j7gx-8j2c-q46q https://cve.radiocsirt.org/vuln/gsd-2007-5278 gsd-2007-5278 https://cve.radiocsirt.org/vuln/gsd-2007-5278