TRCore vulnerabilities
We track 7 vulnerabilities in TRCore products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on November 18, 2024.
Latest TRCore vulnerabilities
- 9.8 Critical severity
DVC: Improper Limitation of a Pathname to a Restricted Directory
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.
- 9.8 Critical severity
DVC: Improper Limitation of a Pathname to a Restricted Directory
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.
- 9.8 Critical severity
DVC: Improper Limitation of a Pathname to a Restricted Directory
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.
- 9.8 Critical severity
DVC: Improper Limitation of a Pathname to a Restricted Directory
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.
- 9.8 Critical severity
DVC: Improper Limitation of a Pathname to a Restricted Directory
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.
- 7.5 High severity
DVC: Improper Limitation of a Pathname to a Restricted Directory
The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.
- 7.5 High severity
DVC: Improper Limitation of a Pathname to a Restricted Directory
The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.