Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 9:42 p.m.1 views

CVE-2026-3525

A flaw was found in Drupal File Access Fix deprecated. An incorrect authorization vulnerability allows an attacker to perform forceful browsing, potentially leading to unauthorized access to sensitive information or resources. This issue arises due to improper checks on file access permissions...

5.8AI score0.00044EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/26 9:31 p.m.2 views

EUVD-2026-16377

Incorrect Authorization vulnerability in Drupal File Access Fix deprecated allows Forceful Browsing.This issue affects File Access Fix deprecated: from 0.0.0 before 1.2.0...

5.8AI score0.00014EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/26 9:31 p.m.3 views

EUVD-2026-16375

Incorrect Authorization vulnerability in Drupal File Access Fix deprecated allows Forceful Browsing.This issue affects File Access Fix deprecated: from 0.0.0 before 1.2.0...

5.8AI score0.00044EPSS
Exploits0References2
NVD
NVD
added 2026/03/26 9:17 p.m.1 views

CVE-2026-3526

Incorrect Authorization vulnerability in Drupal File Access Fix deprecated allows Forceful Browsing.This issue affects File Access Fix deprecated: from 0.0.0 before 1.2.0...

5.3CVSS0.00014EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/26 8:2 p.m.2 views

CVE-2026-3526 File Access Fix (deprecated) - Moderately critical - Access bypass - SA-CONTRIB-2026-021

Incorrect Authorization vulnerability in Drupal File Access Fix deprecated allows Forceful Browsing.This issue affects File Access Fix deprecated: from 0.0.0 before 1.2.0...

5.9AI score0.00014EPSS
Exploits0References1
CVE
CVE
added 2026/03/26 8:2 p.m.3 views

CVE-2026-3526

CVE-2026-3526 affects the Drupal File Access Fix (deprecated) module. An incorrect authorization flaw can enable forceful browsing , potentially granting access to protected files. Affected: module versions prior to 1.2.0 . Root cause: access logic not consistently validated by the module that mo...

5.3CVSS5.8AI score0.00014EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/26 8:2 p.m.1 views

CVE-2026-3525

Incorrect Authorization vulnerability in Drupal File Access Fix deprecated allows Forceful Browsing.This issue affects File Access Fix deprecated: from 0.0.0 before 1.2.0...

5.8AI score0.00044EPSS
Exploits0References2
CVE
CVE
added 2026/03/26 8:2 p.m.5 views

CVE-2026-3525

The CVE-2026-3525 issue affects Drupal File Access Fix (deprecated) prior to version 1.2.0. The root cause is an incorrect authorization check that enables forceful browsing, potentially permitting access to sensitive files or resources. Red Hat and ENISA entries describe an improper file access ...

5.3CVSS5.8AI score0.00044EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/03/26 8:2 p.m.18 views

CVE-2026-3525 File Access Fix (deprecated) - Moderately critical - Access bypass - SA-CONTRIB-2026-020

Incorrect Authorization vulnerability in Drupal File Access Fix deprecated allows Forceful Browsing.This issue affects File Access Fix deprecated: from 0.0.0 before 1.2.0...

0.00044EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/26 12:0 a.m.3 views

Drupal File Access Fix 安全漏洞

Drupal File Access Fix is a file access repair tool provided by the Drupal company. Versions of Drupal File Access Fix prior to 1.2.0 contained security vulnerabilities; these vulnerabilities were due to improper authorization, which could lead to forced browsing...

5.3CVSS5.8AI score0.00014EPSS
Exploits0References2
Debian
Debian
added 2025/03/31 11:13 a.m.8 views

[SECURITY] [DLA 4099-1] flatpak security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4099-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk March 31, 2025 https://wiki.debian.org/LTS -...

10CVSS9.6AI score0.06541EPSS
Exploits1
UbuntuCve
UbuntuCve
added 2024/07/23 3:0 p.m.21 views

CVE-2024-40767

In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced...

6.5CVSS6.1AI score0.00835EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2009/07/21 12:0 a.m.29 views

openSUSE Security Update : curl (curl-530)

Arbitrary file access via HTTP-redirect has been fixed in curl. CVE-2009-0037 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update curl-530. The text description of...

6.8CVSS7.2AI score0.09919EPSS
Exploits2References2
Rows per page
Query Builder