Lucene search
+L

17 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•3 views

CVE-2026-5887: Improper Input Validation

Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to bypass download restrictions via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6.8AI score0.00242EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/07 12:00 a.m.•30 views

File Browser 安全漏洞

File Browser is an open-source file management interface developed by File Browser. It allows for the uploading, deletion, previewing, and editing of files within a specified directory. Versions of File Browser prior to 2.63.1 contained security vulnerabilities. These vulnerabilities stemmed from...

7.5CVSS5.8AI score0.00389EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/02 12:00 a.m.•3 views

CVE-2025-13637: The UI Performs the Wrong Action

Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass download protections via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.5AI score0.00204EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/02 12:00 a.m.•22 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in Google Chrome prior to version 143.0.7499.41, which stems from an improper implementation of the download feature that could allow a remote attacker to bypass download protection via a specially crafted HTML...

4.3CVSS5.9AI score0.00204EPSS
SaveExploits0References3
OSV
OSV
•added 2023/12/04 10:15 p.m.•16 views

CVE-2023-5105

The Frontend File Manager Plugin WordPress plugin before 22.6 has a vulnerability that allows an Editor+ user to bypass the file download logic and download files such as wp-config.php...

6.5CVSS7.3AI score0.01048EPSS
SaveExploits2References1
UbuntuCve
UbuntuCve
•added 2023/04/04 10:15 p.m.•33 views

CVE-2023-1814

Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass download checking via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.8AI score0.00951EPSS
SaveExploits0References4
Prion
Prion
•added 2023/01/10 8:15 p.m.•27 views

Input validation

Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass download restrictions via a crafted HTML page. Chromium security severity: Low...

4.3CVSS6.4AI score0.00587EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/10 12:00 a.m.•3 views

CVE-2023-0139: Improper Input Validation

Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass download restrictions via a crafted HTML page. Chromium security severity: Low...

6.5CVSS5.8AI score0.00587EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/09/24 12:00 a.m.•3 views

PT-2022-6228

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 109.0.5414.74 Description The issue is related to insufficient validation of untrusted input in the Downloads mechanism of Google Chrome, allowing a remote attacker to bypass download restrictions via a crafted...

10CVSS0.00587EPSS
SaveExploits0
Mend
Mend
•added 2022/08/12 7:37 p.m.•1 views

CVE-2022-2622

Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a crafted file...

7.1CVSS0.00694EPSS
SaveExploits0References7
Mend
Mend
•added 2022/08/12 7:37 p.m.•1 views

CVE-2022-2618

Insufficient validation of untrusted input in Internals in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a malicious file...

7.1CVSS0.00739EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/12 12:00 a.m.•4 views

CVE-2022-2622: Undefined Security Weakness

Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a crafted file...

6.5CVSS6.7AI score0.00694EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/12 12:00 a.m.•5 views

CVE-2022-2618: Improper Input Validation

Insufficient validation of untrusted input in Internals in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a malicious file...

6.5CVSS6.7AI score0.00739EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/08/02 12:00 a.m.•1 views

PT-2022-4049

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 104.0.5112.79 Microsoft Edge affected versions not specified Description The issue is related to insufficient validation of untrusted input, which can be exploited by a remote attacker to bypass download...

6.5CVSS0.00739EPSS
SaveExploits0
Mend
Mend
•added 2019/11/25 2:22 p.m.•3 views

CVE-2019-13709

Insufficient policy enforcement in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a crafted HTML page...

7.1CVSS0.00987EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2016/12/08 12:00 a.m.•17 views

The vulnerability of the Windows operating system, which allows a perpetrator to bypass the security mechanisms for secure downloads

The vulnerability of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security mechanisms for safe loading by using a specific loading policy...

5CVSS7.2AI score0.06689EPSS
SaveExploits0References4
Packet Storm
Packet Storm
•added 2010/04/27 12:00 a.m.•28 views

Kasseler CMS 2.0.5 Disclosure

======================================================================================== | Title : kasseler cms 2.0.5 = by Pass / Download Backup Vulnerability | Author : indoushka | email : [email protected] | Dork : Copyright ©2007-2009 by Kasseler CMS. All rights reserved. | Tested on:...

7.4AI score
SaveExploits0
Rows per page
Query Builder