Lucene search
+L

201 matches found

OSV
OSV
•added 2021/11/22 10:15 p.m.•14 views

CVE-2021-44147

An XML External Entity issue in Claris FileMaker Pro and Server including WebDirect before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks...

5.5CVSS5.8AI score0.01172EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/11/22 10:15 p.m.•8 views

CVE-2021-44147

An XML External Entity issue in Claris FileMaker Pro and Server including WebDirect before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks...

5.5CVSS6AI score0.01172EPSS
SaveExploits1References3
NVD
NVD
•added 2021/11/22 10:15 p.m.•30 views

CVE-2021-44147

An XML External Entity issue in Claris FileMaker Pro and Server including WebDirect before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks...

5.5CVSS0.01172EPSS
SaveExploits1References2
Prion
Prion
•added 2021/11/22 10:15 p.m.•26 views

Xxe

An XML External Entity issue in Claris FileMaker Pro and Server including WebDirect before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks...

4.3CVSS5.4AI score0.01172EPSS
SaveExploits1References2Affected Software2
CVE
CVE
•added 2021/11/22 9:26 p.m.•93 views

CVE-2021-44147

CVE-2021-44147 affects Claris FileMaker Pro and Server (including WebDirect). The vulnerability is an XML External Entity (XXE) issue in which a crafted XML/Excel document can disclose local files and enable server-side request forgery. Impact: local file disclosure and SSRF capabilities as descr...

5.5CVSS5.4AI score0.01172EPSS
SaveExploits1References2Affected Software2
Cvelist
Cvelist
•added 2021/11/22 9:26 p.m.•34 views

CVE-2021-44147

An XML External Entity issue in Claris FileMaker Pro and Server including WebDirect before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks...

5.7AI score0.01172EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/11/22 12:00 a.m.•17 views

Claris FileMaker Pro 代码问题漏洞

Claris FileMaker Pro is a cross-platform relational database application from Claris USA. It integrates a database engine with a graphical user interface Gui and security features that allow users to modify the database, or tables, by dragging new elements onto layouts, screens. A security...

5.5CVSS6AI score0.01172EPSS
SaveExploits1References4
NVD
NVD
•added 2020/02/11 2:15 p.m.•27 views

CVE-2014-8347

An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 and Filemaker Pro Advanced 12.04, which could let a malicious user obtain elevated privileges...

7.8CVSS7.6AI score0.01351EPSS
SaveExploits5References5
Prion
Prion
•added 2020/02/11 2:15 p.m.•24 views

Authentication flaw

An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 and Filemaker Pro Advanced 12.04, which could let a malicious user obtain elevated privileges...

4.6CVSS7AI score0.01351EPSS
SaveExploits5References5Affected Software2
CVE
CVE
•added 2020/02/11 1:36 p.m.•65 views

CVE-2014-8347

CVE-2014-8347 describes an authentication bypass in the MatchPasswordData function of DBEngine.dll used by FileMaker Pro 13.0v3 and FileMaker Pro Advanced 12.0v4. A local attacker could leverage this to gain elevated privileges, effectively bypassing login and obtaining higher access within the l...

7.8CVSS7.5AI score0.01351EPSS
SaveExploits5References5Affected Software2
Cvelist
Cvelist
•added 2020/02/11 1:36 p.m.•35 views

CVE-2014-8347

An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 and Filemaker Pro Advanced 12.04, which could let a malicious user obtain elevated privileges...

7.6AI score0.01351EPSS
SaveExploits5References5
OpenVAS
OpenVAS
•added 2019/11/28 12:00 a.m.•20 views

Claris FileMaker Pro Detection (HTTP)

HTTP based detection of Claris FileMaker Pro. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:filemaker:filemakerpro:";...

7.4AI score
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2017/12/18 8:11 p.m.•11 views

community.filemaker.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-455100 Description| Value ---|--- Affected Website:| community.filemaker.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Shee...

6.9AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2017/05/14 2:33 p.m.•14 views

help.filemaker.com XSS vulnerability

Vulnerable URL: https://help.filemaker.com/ci/fattach/get/203076/1494772391/filename/svgxss.svg Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

6.3AI score
SaveExploits0
CNVD
CNVD
•added 2017/04/17 12:00 a.m.•6 views

Unspecified Vulnerability in Drupal Filemaker Form Module

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. An unspecified vulnerability exists in the Drupal Filemaker Form module, for which a detailed vulnerability description is not currently available...

6.9AI score
SaveExploits0References1
Drupal
Drupal
•added 2017/04/12 12:00 a.m.•20 views

Filemaker Form - Critical - Unsupported - SA-CONTRIB-2017-37

Easily create forms in Drupal that submit data to Filemaker databases which are hosted on Filemaker Server. The security team is marking this module unsupported. There is a known security issue with the module that has not been fixed by the maintainer. If you would like to maintain this module,...

7.2AI score
SaveExploits0References8
CNVD
CNVD
•added 2016/11/28 12:00 a.m.•4 views

Cross-site scripting vulnerability in Drupal plugin FileMaker

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site scripting vulnerability exists in the Drupal plugin FileMaker. The program fails to filter user-supplied input, allowing an attacker to construct a malicious...

6.7AI score
SaveExploits0
CNVD
CNVD
•added 2016/05/17 12:00 a.m.•13 views

Apple FileMaker Arbitrary Code Execution Vulnerability

Apple FileMaker on OS X is a set of Apple's database software that runs on a set of operating systems developed specifically for Mac computers. A security vulnerability exists in the server of Apple FileMaker on OS X platforms prior to version 14.0.4. The vulnerability can be exploited by a remot...

7.5CVSS7.3AI score0.01324EPSS
SaveExploits0References1
OSV
OSV
•added 2016/05/14 3:59 p.m.•13 views

CVE-2016-1208

The server in Apple FileMaker before 14.0.4 on OS X allows remote attackers to read PHP source code via unspecified vectors...

7.5CVSS5.9AI score0.01324EPSS
SaveExploits0References3
NVD
NVD
•added 2016/05/14 3:59 p.m.•34 views

CVE-2016-1208

The server in Apple FileMaker before 14.0.4 on OS X allows remote attackers to read PHP source code via unspecified vectors...

7.5CVSS7AI score0.01324EPSS
SaveExploits0References3
Rows per page
Query Builder