4106 matches found
Codiad Vulnerable to Shell Command Injection
components/filemanager/class.filemanager.php in Codiad before 2.8.3 is vulnerable to remote command execution because shell commands can be embedded in parameter values, as demonstrated by searchfiletype...
GHSA-X5G4-CRXQ-QXJX Contao Core directory traversal vulnerability
A logged in back end user can include arbitrary PHP files by manipulating an URL parameter. Since Contao does not allow to upload PHP files in the file manager, the attack is limited to the existing PHP files on the server...
The vulnerability of the File Manager in the Google Chrome browser, which allows a hacker to disclose protected information
The vulnerability of the File Manager in Google Chrome browser is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
Use After Free
chromium is vulnerable to use after free. The vulnerability exists in File Manager which allows an attacker to cause a memory corruption which then leads to an application crash...
PT-2022-2408
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 101.0.4951.41 Description The issue is related to a use after free in the File Manager of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via specific and direct user...
chromium -- multiple vulnerabilities
Chrome Releases reports: This release contains 30 security fixes, including: 1313905 High CVE-2022-1477: Use after free in Vulkan. Reported by SeongHwan Park SeHwa on 2022-04-06 1299261 High CVE-2022-1478: Use after free in SwiftShader. Reported by SeongHwan Park SeHwa on 2022-02-20 1305190 High...
The vulnerability of the Adobe Bridge file manager, related to reading beyond the buffer in memory, allows an attacker to exploit the protected information.
The vulnerability of the Adobe Bridge file manager is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected memory information in the context of the current user, using a specially crafted file...
CVE-2021-32162
A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 through the File Manager feature...
CVE-2021-32162
A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 through the File Manager feature...
CVE-2021-32161
A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the File Manager feature...
CVE-2021-32161
A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the File Manager feature...
CVE-2021-32161
A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the File Manager feature...
CVE-2021-32162
A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 through the File Manager feature...
Cross site request forgery (csrf)
A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 through the File Manager feature...
Cross site scripting
A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the File Manager feature...
CVE-2021-32161
A Cross-Site Scripting XSS vulnerability exists in Webmin 1.973 through the File Manager feature...
CVE-2021-32162
A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 through the File Manager feature...
CVE-2021-32162
A Cross-site request forgery CSRF vulnerability exists in Webmin 1.973 through the File Manager feature...
CVE-2021-32162
The connected documents establish CVE-2021-32162 as a CSRF vulnerability in Webmin 1.973 via the File Manager feature, caused by missing token validation for CSRF protection. The issue potentially allows an attacker to trick victims into performing sensitive actions through the Webmin interface w...