CVE ID :CVE-2021-48015 Published : Oct. 22, 2026, 11:17 a.m. | 50 minutes ago Description :JeeWMS before commit 0a610e8 contains an unauthenticated path traversal vulnerability that allows remote attackers to read arbitrary files via the dbPath parameter. Attackers can send GET requests to...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2021-48015 - JeeWMS Path Traversal via showOrDownByurl.do

VERWANDTEARTIKEL

New Node2Shell Node.js RCE Exploit Let Attackers Execute Malicious Code Through Brotli-Compressed Data

CVE-2026-114621 - baserCMS: SQL injection in the admin panel and admin API

CVE-2026-114357 - DJI CrystalSky ZS600C ships ADB without authentication (ro.adb.secure=0)

CVE-2026-114355 - DJI CrystalSky ZS600C hardware_monitor evaluates attacker-controlled log data as root

CVE-2026-114354 - DJI CrystalSky ZS600C android.dji.server binder transaction 1018 command injection as root

CVE-2026-93639 - Zimbra Collaboration Suite Missing Authorization in ConfigureZimlet Enables Delegated Administrator Privilege Escalation