Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Priority LOW 34

Untrusted search path vulnerability in AttacheCase ver.3.6.1.0 and earlier allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00386 Published 2022-03-31 No fix listed CWE-427
Priority LOW 34

Untrusted search path vulnerability in AttacheCase ver.4.0.2.7 and earlier allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00378 Published 2022-03-31 No fix listed CWE-427
Priority LOW 19

Directory traversal vulnerability in ver.2.8.4.0 and earlier and ver.3.3.0.0 and earlier allows an attacker to create arbitrary files via specially crafted ATC file.

CVSS 3.0LOW 3.3 Local No auth User interaction EPSS 0.01238 Published 2018-09-07 No fix listed CWE-22
Priority LOW 28

Directory traversal vulnerability in ver.2.8.4.0 and earlier and ver.3.3.0.0 and earlier allows an attacker to create or overwrite existing files via specially crafted ATC file.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.01419 Published 2018-09-07 No fix listed CWE-22
Priority LOW 31

Directory traversal vulnerability in AttacheCase for Java 0.60 and earlier, AttacheCase Lite 1.4.6 and earlier, and AttacheCase Pro 1.5.7 and earlier allows remote attackers to read arbitrary files via specially crafted…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.03417 Published 2017-04-28 No fix listed CWE-22
Priority LOW 30

Directory traversal vulnerability in AttacheCase 2.8.2.8 and earlier and 3.2.0.4 and earlier allows remote attackers to read arbitrary files via specially crafted ATC file.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.02605 Published 2017-04-28 No fix listed CWE-22