Lucene search
+L

18 matches found

RedhatCVE
RedhatCVE
•added 2026/02/14 7:23 a.m.•15 views

CVE-2026-25108

FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user may send a specially crafted HTTP request to execute an arbitrary OS command...

8.8CVSS5.9AI score0.05066EPSS
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2026/02/13 7:51 a.m.•24 views

FileZen vulnerable to OS command injection

Overview FileZen provided by Soliton Systems K.K. contains the following vulnerability. OS command injection CWE-78 - CVE-2026-25108 This vulnerability can be exploited when FileZen Antivirus Check Option is enabled The developer states that attacks exploiting the vulnerability has been observed...

8.8CVSS5.7AI score0.05066EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/02/13 3:39 a.m.•11 views

CVE-2026-25108

FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user may send a specially crafted HTTP request to execute an arbitrary OS command...

8.8CVSS5.9AI score0.05066EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/02/13 3:39 a.m.•229 views

CVE-2026-25108

FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user may send a specially crafted HTTP request to execute an arbitrary OS command...

8.8CVSS0.05066EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/13 12:00 a.m.•2 views

CVE-2026-25108: Improper Neutralization of Special Elements used in an OS Command

FileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is enabled, a logged-in user may send a specially crafted HTTP request to execute an arbitrary OS command...

8.8CVSS8.4AI score0.05066EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
•added 2026/02/13 12:00 a.m.•9 views

VulnCheck KEV: CVE-2026-25108

Soliton Systems K.K FileZen contains an OS command injection vulnerability when an user logs-in to the affected product and sends a specially crafted HTTP request...

8.8CVSS8.1AI score0.05066EPSS
SaveIn wildExploits0References6
SUSE CVE
SUSE CVE
•added 2023/02/15 3:41 a.m.•7 views

SUSE CVE-2021-31153

please before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged locations via the searchpath function, the --check option, or the -d option...

3.3CVSS4.3AI score0.00426EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•13 views

Vulnerability of the search_path function and the --check option, -d system administration utility. This relates to the disclosure of information in error-prone areas, allowing attackers to gain access to confidential data.

The vulnerability of the searchpath function and the --check option, as well as the -d option of the system administration utility, are related to the disclosure of information in the erroneous data area. Exploiting this vulnerability may allow an attacker to gain access to confidential data...

3.3CVSS5.4AI score0.00426EPSS
SaveExploits1References5Affected Software2
OSV
OSV
•added 2021/05/27 1:15 p.m.•7 views

DEBIAN-CVE-2021-31153

please before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged locations via the searchpath function, the --check option, or the -d option...

3.3CVSS4.6AI score0.00426EPSS
SaveExploits1References1
NVD
NVD
•added 2021/05/27 1:15 p.m.•31 views

CVE-2021-31153

please before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged locations via the searchpath function, the --check option, or the -d option...

3.3CVSS0.00426EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/05/27 1:15 p.m.•9 views

CVE-2021-31153

please before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged locations via the searchpath function, the --check option, or the -d option...

3.3CVSS6.1AI score0.00426EPSS
SaveExploits1References3
Prion
Prion
•added 2021/05/27 1:15 p.m.•22 views

Design/Logic Flaw

please before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged locations via the searchpath function, the --check option, or the -d option...

2.1CVSS4.1AI score0.00426EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2021/05/27 12:08 p.m.•94 views

CVE-2021-31153

CVE-2021-31153 affects pleaser before 0.4.0, allowing a local unprivileged user to discover the existence of files or directories in privileged locations via search_path, --check, or -d. The root cause is inadequate handling of path discovery during these options. Documented impact is local infor...

3.3CVSS4AI score0.00426EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2021/05/27 12:08 p.m.•70 views

CVE-2021-31153

please before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged locations via the searchpath function, the --check option, or the -d option...

3.3CVSS3.6AI score0.00426EPSS
SaveExploits1
Cvelist
Cvelist
•added 2021/05/27 12:08 p.m.•43 views

CVE-2021-31153

please before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged locations via the searchpath function, the --check option, or the -d option...

4.5AI score0.00426EPSS
SaveExploits1References2
OSV
OSV
•added 2021/05/27 12:00 p.m.•23 views

RUSTSEC-2021-0104 File exposure in pleaser

pleaser before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged locations via the searchpath function, the --check option, or the -d option...

3.3CVSS3.9AI score0.00426EPSS
SaveExploits1References3
RustSec
RustSec
•added 2021/05/27 12:00 p.m.•21 views

File exposure in pleaser

pleaser before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged locations via the searchpath function, the --check option, or the -d option...

3.3CVSS5AI score0.00426EPSS
SaveExploits1Affected Software1
UbuntuCve
UbuntuCve
•added 2021/05/05 12:00 a.m.•41 views

CVE-2021-31153

please before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged locations via the searchpath function, the --check option, or the -d option...

3.3CVSS5.9AI score0.00426EPSS
SaveExploits1References2
Rows per page
Query Builder