Lucene search
+L

3218 matches found

CVE
CVE
added 2021/02/12 6:15 a.m.85 views

CVE-2021-20651

CVE-2021-20651 describes a directory traversal vulnerability in ELECOM File Manager (all versions). The weakness allows a remote attacker to create or overwrite arbitrary files within directories that the application can access, via unspecified vectors. Connected sources corroborate impact statem...

9.1CVSS9AI score0.01871EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/02/12 6:15 a.m.32 views

CVE-2021-20651

Directory traversal vulnerability in ELECOM File Manager all versions allows remote attackers to create an arbitrary file or overwrite an existing file in a directory which can be accessed with the application privileges via unspecified vectors...

9.3AI score0.01871EPSS
SaveExploits0References2
OPENSUSE Linux
OPENSUSE Linux
added 2021/02/10 12:0 a.m.46 views

Security update for firejail (important)

openSUSE Security Update: Security update for firejail Announcement ID: openSUSE-SU-2021:0271-1 Rating: important References: 1181990 Cross-References: CVE-2020-17367 CVE-2020-17368 CVE-2021-26910 CVSS scores: CVE-2020-17367 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-17368 NV...

9.8CVSS7.2AI score0.04098EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.9 views

The vulnerability of the Adobe Bridge file manager, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted request...

9.3CVSS7.7AI score0.03864EPSS
SaveExploits0References3Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2021/01/27 8:38 a.m.4 views

Android App "ELECOM File Manager" vulnerable to directory traversal

Overview Android App "ELECOM File Manager" provided by ELECOM CO.,LTD. contains a directory traversal vulnerability CWE-22 due to a flaw in the processing of the filenames when extracting the compressed files. Ryohei Koike reported this vulnerability to IPA. JPCERT/CC coordinated with the develop...

9.1CVSS7AI score0.01871EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/01/27 12:0 a.m.9 views

Elecom File Manager For Android Path Traversal Vulnerability

Elecom File Manager For Android is an application from Elecom Japan for managing files on Android devices. A security vulnerability exists in ELECOM File Manager: All versions, which allows remote attackers to perform directory traversal attacks...

9.1CVSS6.7AI score0.01871EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2021/01/26 12:0 a.m.79 views

JVN#98115035: Android App "ELECOM File Manager" vulnerable to directory traversal

Android App "ELECOM File Manager" provided by ELECOM CO.,LTD. contains a directory traversal vulnerability CWE-22 due to a flaw in the processing of the filenames when extracting the compressed files. Impact A remote attacker may create an arbitrary file or overwrite an existing file in a directo...

9.1CVSS9.1AI score0.01871EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/01/07 12:0 a.m.11 views

QuiXplorer 跨站脚本漏洞

QuiXplorer is a web-based file manager that supports document uploading, downloading, searching, editing and more. Quixplorer has an input validation error vulnerability in version 2.4.1 and earlier, which originates from a cross-site scripting attack caused by improper user-supplied input...

6.1CVSS6.2AI score0.02852EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/01/05 12:0 a.m.6 views

Veno File Manager Directory Traversal Vulnerability

Veno File Manager is a simple and flexible file manager. A directory traversal vulnerability exists in Veno File Manager 3.5.6. An attacker can use this vulnerability to download sensitive files from a server...

7.5CVSS6.9AI score0.0223EPSS
SaveExploits1References1
NVD
NVD
added 2021/01/04 3:15 p.m.22 views

CVE-2020-22550

Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server...

7.5CVSS7.5AI score0.0223EPSS
SaveExploits1References2
OSV
OSV
added 2021/01/04 3:15 p.m.7 views

CVE-2020-22550

Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server...

7.5CVSS7.1AI score0.0223EPSS
SaveExploits1References2
Prion
Prion
added 2021/01/04 3:15 p.m.23 views

Directory traversal

Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server...

5CVSS7.5AI score0.0223EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2021/01/04 2:19 p.m.50 views

CVE-2020-22550

CVE-2020-22550 affects Veno File Manager 3.5.6 and is described as a directory traversal vulnerability that allows an attacker to download sensitive files from the server. The connected documents corroborate the same issue across multiple sources (e.g., NVD, Red Hat, CNVD, CNVD CNVD, RH, etc.), s...

7.5CVSS7.4AI score0.0223EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/01/04 2:19 p.m.27 views

CVE-2020-22550

Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server...

7.5AI score0.0223EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/01/04 12:0 a.m.7 views

VFM Veno File Manager 路径遍历漏洞

Veno File Manager is a simple and flexible file manager. A directory traversal vulnerability exists in Veno File Manager 3.5.6. An attacker can use this vulnerability to download sensitive files from a server...

7.5CVSS7.1AI score0.0223EPSS
SaveExploits1References3
NVD
NVD
added 2020/12/30 8:15 p.m.21 views

CVE-2020-35173

The Amaze File Manager application before 3.4.2 for Android does not properly restrict intents for controlling the FTP server aka services.ftpservice.FTPReceiver.ACTIONSTARTFTPSERVER and services.ftpservice.FTPReceiver.ACTIONSTOPFTPSERVER...

9.8CVSS9.3AI score0.01704EPSS
SaveExploits0References3
OSV
OSV
added 2020/12/30 8:15 p.m.11 views

CVE-2020-35173

The Amaze File Manager application before 3.4.2 for Android does not properly restrict intents for controlling the FTP server aka services.ftpservice.FTPReceiver.ACTIONSTARTFTPSERVER and services.ftpservice.FTPReceiver.ACTIONSTOPFTPSERVER...

9.8CVSS7.2AI score
SaveExploits0References3
Prion
Prion
added 2020/12/30 8:15 p.m.21 views

Code injection

The Amaze File Manager application before 3.4.2 for Android does not properly restrict intents for controlling the FTP server aka services.ftpservice.FTPReceiver.ACTIONSTARTFTPSERVER and services.ftpservice.FTPReceiver.ACTIONSTOPFTPSERVER...

7.5CVSS9.1AI score0.01704EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2020/12/30 7:4 p.m.53 views

CVE-2020-35173

The Amaze File Manager Android app is affected by CVE-2020-35173 (before 3.4.2). The root cause is improper restriction of intents for controlling the FTP server (FTPReceiver.ACTION_START_FTPSERVER and ACTION_STOP_FTPSERVER). This could allow unauthorized control of the FTP service; CVSS scores i...

9.8CVSS9.2AI score0.01704EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2020/12/30 7:4 p.m.31 views

CVE-2020-35173

The Amaze File Manager application before 3.4.2 for Android does not properly restrict intents for controlling the FTP server aka services.ftpservice.FTPReceiver.ACTIONSTARTFTPSERVER and services.ftpservice.FTPReceiver.ACTIONSTOPFTPSERVER...

9.4AI score0.01704EPSS
SaveExploits0References3
Rows per page
Query Builder