https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:16:33 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-01637 cnvd-2018-01637 https://cve.radiocsirt.org/vuln/cnvd-2018-01637 https://cve.radiocsirt.org/vuln/euvd-2026-79063 EUVD-2026-79063 https://cve.radiocsirt.org/vuln/euvd-2026-79063 https://cve.radiocsirt.org/vuln/fkie_cve-2017-16610 <p>This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within upload_save_do.jsp. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code under the context of the current user. Was ZDI-CAN-4751.</p> <p>This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within upload_save_do.jsp. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code under the context of the current user. Was ZDI-CAN-4751.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-16610 https://cve.radiocsirt.org/vuln/ghsa-g648-3wj5-c8r8 <p>This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within upload_save_do.jsp. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code under the context of the current user. Was ZDI-CAN-4751.</p> <p>This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Netgain Enterprise Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within upload_save_do.jsp. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code under the context of the current user. Was ZDI-CAN-4751.</p> https://cve.radiocsirt.org/vuln/ghsa-g648-3wj5-c8r8 https://cve.radiocsirt.org/vuln/gsd-2017-16610 gsd-2017-16610 https://cve.radiocsirt.org/vuln/gsd-2017-16610