Approved changes feed: RSS · Atom

cpe:2.3:a:trcore:dvc:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTrcore (7a892c23-9c29-5f19-9298-4b731c17047f)
ProductDvc (f65e18e2-a7a6-5ed4-af46-edb7ee6c1ed3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-11315 vulnerable 2026-06-08 06:23:49.346597 TRCore DVC - Arbitrary File Upload through Path Traversal
CRITICAL (9.8)
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.
Published: 2024-11-18T06:47:31.052Z
Updated: 2024-11-18T14:07:52.977Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11314 vulnerable 2026-06-08 06:23:49.346236 TRCore DVC - Arbitrary File Upload through Path Traversal
CRITICAL (9.8)
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.
Published: 2024-11-18T06:41:38.347Z
Updated: 2024-11-18T13:48:30.521Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11313 vulnerable 2026-06-08 06:23:49.345869 TRCore DVC - Arbitrary File Upload through Path Traversal
CRITICAL (9.8)
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.
Published: 2024-11-18T06:39:04.518Z
Updated: 2024-11-18T13:57:51.659Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11312 vulnerable 2026-06-08 06:23:49.345396 TRCore DVC - Arbitrary File Upload through Path Traversal
CRITICAL (9.8)
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.
Published: 2024-11-18T06:35:21.487Z
Updated: 2024-11-18T13:57:51.501Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11311 vulnerable 2026-06-08 06:23:49.344864 TRCore DVC - Arbitrary File Upload through Path Traversal
CRITICAL (9.8)
The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells.
Published: 2024-11-18T06:24:25.095Z
Updated: 2024-11-18T13:57:51.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11310 vulnerable 2026-06-08 06:23:49.344446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11309 vulnerable 2026-06-08 06:23:49.343959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11308 vulnerable 2026-06-08 06:23:49.343385 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.