4213 matches found
CVE-2022-28997
CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery SSRF which can be leveraged to leak sensitive data via a local file inclusion at /admin/filemanager/connector/...
CVE-2022-28997
CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery SSRF which can be leveraged to leak sensitive data via a local file inclusion at /admin/filemanager/connector/...
GHSA-5PCV-M8W2-62M9 Ajenti Cross-site Scripting Via Filename
Ajenti through v1.2.23.13 has a Cross-site Scripting XSS vulnerability via a filename that is mishandled in File Manager...
Ajenti Cross-site Scripting Via Filename
Ajenti through v1.2.23.13 has a Cross-site Scripting XSS vulnerability via a filename that is mishandled in File Manager...
Croogo vulnerable to Cross-site Scripting in title field
A stored self-XSS exists in Croogo before v3.0.7, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/file-manager/attachments/edit/4...
GHSA-Q5FG-V5P7-R424 Croogo vulnerable to Cross-site Scripting in title field
A stored self-XSS exists in Croogo before v3.0.7, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/file-manager/attachments/edit/4...
CVE-2022-1648
Pandora FMS v7.0NG.760 and below allows a relative path traversal in File Manager where a privileged user could upload a .php file outside the intended images directory which is restricted to execute the .php file. The impact could lead to a Remote Code Execution with running application privileg...
Codiad Vulnerable to Shell Command Injection
components/filemanager/class.filemanager.php in Codiad before 2.8.3 is vulnerable to remote command execution because shell commands can be embedded in parameter values, as demonstrated by searchfiletype...
GHSA-X5G4-CRXQ-QXJX Contao Core directory traversal vulnerability
A logged in back end user can include arbitrary PHP files by manipulating an URL parameter. Since Contao does not allow to upload PHP files in the file manager, the attack is limited to the existing PHP files on the server...
Google Chrome File Manager Disclosure
The vulnerability of the File Manager in Google Chrome browser is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
Use After Free
chromium is vulnerable to use after free. The vulnerability exists in File Manager which allows an attacker to cause a memory corruption which then leads to an application crash...
PT-2022-2408
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 101.0.4951.41 Description The issue is related to a use after free in the File Manager of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via specific and direct user...
chromium -- multiple vulnerabilities
Chrome Releases reports: This release contains 30 security fixes, including: 1313905 High CVE-2022-1477: Use after free in Vulkan. Reported by SeongHwan Park SeHwa on 2022-04-06 1299261 High CVE-2022-1478: Use after free in SwiftShader. Reported by SeongHwan Park SeHwa on 2022-02-20 1305190 High...
Adobe Bridge Buffer Overflow Information Disclosure
The vulnerability of the Adobe Bridge file manager is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected memory information in the context of the current user, using a specially crafted file...
CVE-2021-32161
A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the File Manager feature...
CVE-2021-32161
A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the File Manager feature...
CVE-2021-32162
A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 through the File Manager feature...
CVE-2021-32162
A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 through the File Manager feature...
