Lucene search
+L

4106 matches found

OSV
OSV
•added 2022/04/05 12:15 a.m.•7 views

UBUNTU-CVE-2022-0603

Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.7AI score0.0083EPSS
SaveExploits0References3
Mend
Mend
•added 2022/04/04 11:55 p.m.•1 views

CVE-2022-0603

Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.0083EPSS
SaveExploits0References6
AlpineLinux
AlpineLinux
•added 2022/04/04 11:55 p.m.•107 views

CVE-2022-0603

Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.7AI score0.0083EPSS
SaveExploits0
Cvelist
Cvelist
•added 2022/04/04 11:55 p.m.•26 views

CVE-2022-0603

Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

9.1AI score0.0083EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2022/04/04 11:55 p.m.•82 views

CVE-2022-0603

Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.7AI score0.0083EPSS
SaveExploits0
CVE
CVE
•added 2022/04/04 11:55 p.m.•332 views

CVE-2022-0603

CVE-2022-0603 is a Use‑After‑Free in Chrome OS File Manager affecting Google Chrome/Chromium. Root cause: use-after-free in the File Manager component, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected software version: Chrome OS builds prior to 9...

8.8CVSS8.7AI score0.0083EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
•added 2022/04/04 6:07 p.m.•21 views

Use After Free

Chrome is vulnerable to use after free. The vulnerability exists due to a memory corruption in File Manager...

8.8CVSS1.8AI score0.00859EPSS
SaveExploits1References4Affected Software2
OSV
OSV
•added 2022/04/04 4:15 p.m.•17 views

CVE-2022-0403

The Library File Manager WordPress plugin before 5.2.3 is using an outdated version of the elFinder library, which is know to be affected by security issues CVE-2021-32682, and does not have any authorisation as well as CSRF checks in its connector AJAX action, allowing any authenticated users,...

8.1CVSS5.8AI score0.01251EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2022/04/04 4:15 p.m.•13 views

CVE-2022-0403

The Library File Manager WordPress plugin before 5.2.3 is using an outdated version of the elFinder library, which is know to be affected by security issues CVE-2021-32682, and does not have any authorisation as well as CSRF checks in its connector AJAX action, allowing any authenticated users,...

8.1CVSS7.7AI score0.01251EPSS
SaveExploits2References2
CVE
CVE
•added 2022/04/04 3:35 p.m.•200 views

CVE-2022-0403

CVE-2022-0403 relates to the WordPress plugin Library File Manager (up to version 5.2.3) using an outdated elFinder library that is vulnerable (CVE-2021-32682). The root cause is lack of authorization and CSRF protection in the connector AJAX action, allowing any authenticated user, even at Subsc...

8.1CVSS8.9AI score0.01251EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/04/04 12:00 a.m.•5 views

PT-2022-13157

Name of the Vulnerable Software and Affected Versions Library File Manager WordPress plugin versions prior to 5.2.3 Description The issue affects the Library File Manager WordPress plugin due to its use of an outdated elFinder library version, which lacks authorization and CSRF checks in its...

8.1CVSS5.9AI score0.01251EPSS
SaveExploits2References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/04 12:00 a.m.•5 views

CVE-2022-0603: Use After Free

Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.8AI score0.0083EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/04 12:00 a.m.•6 views

CVE-2022-0403: Unrestricted Upload of File with Dangerous Type

The Library File Manager WordPress plugin before 5.2.3 is using an outdated version of the elFinder library, which is know to be affected by security issues CVE-2021-32682, and does not have any authorisation as well as CSRF checks in its connector AJAX action, allowing any authenticated users,...

8.1CVSS7.5AI score0.01251EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2022/04/04 12:00 a.m.•18 views

WordPress plugin Library File Manager 代码问题漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Library File Manager plugin has a cross-site request forgery vulnerability, which stems from the fact that the plugin uses a...

8.1CVSS5.5AI score0.01251EPSS
SaveExploits2References2
Packet Storm
Packet Storm
•added 2022/04/04 12:00 a.m.•327 views

Roxy File Manager 1.4.5 PHP File Upload Restriction Bypass

Exploit Title: Roxy File Manager 1.4.5 PHP File Upload Restriction Bypass Exploit Author: Adam Shebani NULLHE4D Date: 07/03/2022 Software: Roxy File Manager Version: 1.4.5 CVE: CVE-2018-20525 Vendor Homepage: http://www.roxyfileman.com/ Software Link:...

9.1CVSS0.1AI score0.21646EPSS
SaveExploits7
Patchstack
Patchstack
•added 2022/03/30 12:00 a.m.•12 views

WordPress Library File Manager plugin <= 5.2.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered in WordPress Library File Manager plugin versions = 5.2.2. Solution Update the WordPress Library File Manager plugin to the latest available version at least 5.2.3...

2.6AI score
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/03/29 12:00 a.m.•14 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser by Google Inc. of the U.S. V8 is one of the open source JavaScript engines. Google Chrome suffers from a resource management error vulnerability that exists due to a post-release use error in Google Chrome's file manager. A remote attacker could trick a victim into...

8.8CVSS7.6AI score0.00859EPSS
SaveExploits1References8
OSV
OSV
•added 2022/03/28 6:15 p.m.•17 views

CVE-2018-25030

A vulnerability classified as problematic has been found in Mirmay Secure Private Browser and File Manager up to 2.5. Affected is the Auto Lock. A race condition leads to a local authentication bypass. The exploit has been disclosed to the public and may be used...

2.5CVSS5AI score0.00265EPSS
SaveExploits1References3
NVD
NVD
•added 2022/03/28 6:15 p.m.•24 views

CVE-2018-25030

A vulnerability classified as problematic has been found in Mirmay Secure Private Browser and File Manager up to 2.5. Affected is the Auto Lock. A race condition leads to a local authentication bypass. The exploit has been disclosed to the public and may be used...

3.3CVSS0.00265EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/03/28 6:00 p.m.•30 views

CVE-2018-25030 Mirmay Secure Private Browser / File Manager Auto Lock improper authentication

A vulnerability classified as problematic has been found in Mirmay Secure Private Browser and File Manager up to 2.5. Affected is the Auto Lock. A race condition leads to a local authentication bypass. The exploit has been disclosed to the public and may be used...

3.3CVSS3.9AI score0.00265EPSS
SaveExploits1References3
Rows per page
Query Builder