CVE-2025-13261

A vulnerability was found in lsfusion platform up to 6.1. Affected is the function DownloadFileRequestHandler of the file web-client/src/main/java/lsfusion/http/controller/file/DownloadFileRequestHandler.java. Performing manipulation of the argument Version results in path traversal. Remote...

CVE-2025-13261

CVE-2025-13261 affects lsfusion platform up to 6.1. The vulnerability is in DownloadFileRequestHandler.java (web-client/src/main/java/lsfusion/http/controller/file/DownloadFileRequestHandler.java). Manipulation of the Version argument leads to path traversal with remote exploitation possible; exp...

CVE-2024-13261

creationtimestamp| type| source ---|---|--- 2025-01-09 20:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdimqrxrg2a...

CVE-2024-13261

Cross-Site Request Forgery CSRF vulnerability in Drupal Acquia DAM allows Cross Site Request Forgery.This issue affects Acquia DAM: from 0.0.0 before 1.0.13, from 1.1.0 before 1.1.0-beta3...

CVE-2024-13261

CVE-2024-13261 is a CSRF vulnerability in the Drupal Acquia DAM module. Affected releases are Acquia DAM for Drupal: 0.0.0 up to (but not including) 1.0.13, and 1.1.0 up to (but not including) 1.1.0-beta3. The issue stems from inadequate protection to disconnect a site from DAM (as described in S...

CVE-2024-13261 Acquia DAM - Moderately critical - Cross Site Request Forgery, Denial of Service - SA-CONTRIB-2024-025

Cross-Site Request Forgery CSRF vulnerability in Drupal Acquia DAM allows Cross Site Request Forgery.This issue affects Acquia DAM: from 0.0.0 before 1.0.13, from 1.1.0 before 1.1.0-beta3...

CVE-2024-13261 Acquia DAM - Moderately critical - Cross Site Request Forgery, Denial of Service - SA-CONTRIB-2024-025

Cross-Site Request Forgery CSRF vulnerability in Drupal Acquia DAM allows Cross Site Request Forgery.This issue affects Acquia DAM: from 0.0.0 before 1.0.13, from 1.1.0 before 1.1.0-beta3...

CVE-2020-13261

Amazon EKS credentials disclosure in GitLab CE/EE 12.6 and later through 13.0.1 allows other administrators to view Amazon EKS credentials via HTML source code...

CVE-2020-13261

CVE-2020-13261 affects GitLab CE/EE 12.6 through 13.0.1, where Amazon EKS credentials can be disclosed to other administrators via HTML source code. Connected sources confirm the vulnerability and affected ranges, but do not provide concrete exploit steps or a published remediation version. The i...

CVE-2020-13261

Amazon EKS credentials disclosure in GitLab CE/EE 12.6 and later through 13.0.1 allows other administrators to view Amazon EKS credentials via HTML source code...

CVE-2020-13261

Removed by vendor...

CVE-2019-13261

XnView Classic 2.48 has a User Mode Write AV starting at xnview+0x0000000000328384...

CVE-2019-13261

CVE-2019-13261 applies to XnView Classic 2.48. The issue is described as a User-Mode Write access violation at xnview+0x0000000000328384 and is also referenced as a buffer overflow in CNVD-2019-22457. Documented impact includes potential denial of service; no patch/version fix is provided in the ...

CVE-2018-13261

...

CVE-2018-13261

CVE-2018-13261 is rejected/not used; this ID does not represent an active vulnerability entry.

CVE-2017-13261

CVE-2017-13261 affects Android Bluetooth via the BNEP implementation, specifically the bnep_process_control_packet path in bnep_utils.cc. The flaw is an out-of-bounds read caused by a missing bounds check, enabling remote information disclosure without user interaction over a Bluetooth network co...