3218 matches found
GHSA-X5G4-CRXQ-QXJX Contao Core directory traversal vulnerability
A logged in back end user can include arbitrary PHP files by manipulating an URL parameter. Since Contao does not allow to upload PHP files in the file manager, the attack is limited to the existing PHP files on the server...
The vulnerability of the File Manager in the Google Chrome browser, which allows a hacker to disclose protected information
The vulnerability of the File Manager in Google Chrome browser is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
Use After Free
chromium is vulnerable to use after free. The vulnerability exists in File Manager which allows an attacker to cause a memory corruption which then leads to an application crash...
chromium -- multiple vulnerabilities
Chrome Releases reports: This release contains 30 security fixes, including: 1313905 High CVE-2022-1477: Use after free in Vulkan. Reported by SeongHwan Park SeHwa on 2022-04-06 1299261 High CVE-2022-1478: Use after free in SwiftShader. Reported by SeongHwan Park SeHwa on 2022-02-20 1305190 High...
The vulnerability of the Adobe Bridge file manager, related to reading beyond the buffer in memory, allows an attacker to exploit the protected information.
The vulnerability of the Adobe Bridge file manager is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected memory information in the context of the current user, using a specially crafted file...
CVE-2021-32161
A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the File Manager feature...
CVE-2021-32162
A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 through the File Manager feature...
CVE-2021-32162
A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 through the File Manager feature...
CVE-2021-32161
A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the File Manager feature...
CVE-2021-32161
A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the File Manager feature...
Cross site request forgery (csrf)
A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 through the File Manager feature...
Cross site scripting
A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the File Manager feature...
CVE-2021-32162
A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 through the File Manager feature...
CVE-2021-32161
A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the File Manager feature...
CVE-2021-32162
The connected documents establish CVE-2021-32162 as a CSRF vulnerability in Webmin 1.973 via the File Manager feature, caused by missing token validation for CSRF protection. The issue potentially allows an attacker to trick victims into performing sensitive actions through the Webmin interface w...
CVE-2021-32162
A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 through the File Manager feature...
CVE-2021-32161
A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the File Manager feature...
CVE-2021-32161
CVE-2021-32161 is an XSS vulnerability in Webmin 1.973 via the File Manager feature. It stems from insufficient input sanitization of user-supplied parameters in the File Manager, enabling attacker-controlled JavaScript in the user’s browser. Affected: Webmin (version 1.973) and its File Manager....
WordPress Library File Manager plugin跨站请求伪造漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Library File Manager plugin has a cross-site request forgery vulnerability, which stems from the fact that the plugin uses a...
The vulnerability of the File Manager in Google Chrome browser allows a hacker to gain unauthorized access to protected information.
The vulnerability of the File Manager in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created web page...