CVE-2024-11136

Vulnerability Description

The default TCL Camera application exposes a provider vulnerable to path traversal vulnerability. Malicious application can supply malicious URI path and delete arbitrary files from user’s external storage.

CVSS:9.8(Critical)

The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL.

CWE-352018
CVSS:9.8(Critical)

This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant.

CWE-352024
CVSS:9.3(Critical)

Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi component.

CWE-352024
CVSS:9.3(Critical)

Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS allows Path Traversal.This issue affects WPLMS: from n/a before 1.9.9.5.

CWE-352024
CVSS:9.1(Critical)

A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversa...

CWE-352020
CVSS:8.8(High)

In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an attacker to write to any file to any location of the filesystem, which could lead to remote code execution.

CWE-352023