Lucene search
K

6 matches found

NVD
NVD
added 2026/04/07 5:16 p.m.3 views

CVE-2026-35606

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.1, the resourceGetHandler in http/resource.go returns full text file content without checking the Perm.Download permission flag. All three other...

7.5CVSS0.00274EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2026/04/07 4:29 p.m.1 views

CVE-2026-35606

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.1, the resourceGetHandler in http/resource.go returns full text file content without checking the Perm.Download permission flag. All three other...

5.3CVSS5.9AI score0.00274EPSS
Exploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/07 12:0 a.m.3 views

PT-2026-30907

Name of the Vulnerable Software and Affected Versions File Browser versions prior to 2.63.1 Description File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. The resourceGetHandler in http/resource.go returns full...

5.3CVSS5.9AI score0.00274EPSS
Exploits1References6
CNNVD
CNNVD
added 2026/04/07 12:0 a.m.3 views

File Browser 安全漏洞

File Browser is an open-source file management interface developed by File Browser. It allows for the uploading, deletion, previewing, and editing of files within a specified directory. Versions of File Browser prior to 2.63.1 contained security vulnerabilities. These vulnerabilities stemmed from...

7.5CVSS5.8AI score0.00274EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2022/07/08 12:0 a.m.3 views

The vulnerability of the API interface of the database of Cisco Expressway Series and Cisco Telepresence VCS devices allows attackers to perform attacks by bypassing the absolute path on the vulnerable device and rewriting files in the basic operating system with root privileges.

The vulnerability of the API interface of Cisco Expressway Series and Cisco Telepresence VCS database devices is related to insufficient checking of arguments entered by users during command execution. Exploiting this vulnerability allows attackers to perform attacks remotely, bypassing the...

9CVSS7AI score0.01741EPSS
Exploits0References2Affected Software2
0day.today
0day.today
added 2008/11/07 12:0 a.m.37 views

U&M Software Signup 1.1 Auth Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================= U&M Software Signup 1.1 Auth Bypass Vulnerability ================================================= ============================================================================== U&M Softwa...

7.1AI score
Exploits0
Rows per page
Query Builder