Lucene search
+L

48 matches found

BDU FSTEC
BDU FSTEC
added 2023/05/10 12:0 a.m.9 views

The vulnerability in the web administration interface of the FileZen file-sharing server allows a hacker to execute arbitrary commands.

The vulnerability in the FileZen file-sharing server’s administrative web interface relates to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS7.6AI score0.03541EPSS
SaveExploits1References5Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2022/06/22 12:0 a.m.3 views

VulnCheck KEV: CVE-2021-20655

FileZen V3.0.0 to V4.2.7 and V5.0.0 to V5.0.2 allows a remote attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

9CVSS7.4AI score0.03541EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/02/18 12:0 a.m.44 views

FileZen OS Command Injection Vulnerability

FileZen is a device for secure file transfer and sharing via email or web interface. An OS command injection vulnerability exists in FileZen 3.0.0 - 4.2.7, 5.0.0 - 5.0.2. A remote attacker with administrator privileges can exploit this vulnerability to execute arbitrary OS commands...

9CVSS8AI score0.03541EPSS
SaveExploits1References1
OSV
OSV
added 2021/02/17 3:15 a.m.6 views

CVE-2021-20655

FileZen V3.0.0 to V4.2.7 and V5.0.0 to V5.0.2 allows a remote attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

7.2CVSS7.4AI score0.03541EPSS
SaveExploits1References2
NVD
NVD
added 2021/02/17 3:15 a.m.25 views

CVE-2021-20655

FileZen V3.0.0 to V4.2.7 and V5.0.0 to V5.0.2 allows a remote attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

9CVSS0.03541EPSS
SaveExploits1References2
Prion
Prion
added 2021/02/17 3:15 a.m.17 views

Design/Logic Flaw

FileZen V3.0.0 to V4.2.7 and V5.0.0 to V5.0.2 allows a remote attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

9CVSS7.1AI score0.03541EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2021/02/17 2:5 a.m.125 views

CVE-2021-20655

FileZen (versions V3.0.0–V4.2.7 and V5.0.0–V5.0.2) has an OS command injection vulnerability exploitable by a remote attacker with administrator rights via unspecified vectors. Root cause is an OS command injection flaw (CWE-78) in the product, potentially enabling arbitrary command execution. Re...

9CVSS7.2AI score0.03541EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/02/17 2:5 a.m.32 views

CVE-2021-20655

FileZen V3.0.0 to V4.2.7 and V5.0.0 to V5.0.2 allows a remote attacker with administrator rights to execute arbitrary OS commands via unspecified vectors...

7.4AI score0.03541EPSS
SaveExploits1References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2021/02/16 12:0 a.m.99 views

JVN#58774946: FileZen vulnerable to OS command injection

FileZen provided by Soliton Systems K.K. is an appliance for secure file transfer and sharing by mail or an web interface. FileZen contains an OS command injection vulnerability CWE-78. Impact A remote attacker who obtained the administrative account of this product may execute an arbitrary OS...

9CVSS7.3AI score0.03541EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/02/16 12:0 a.m.9 views

Soliton Systems Kk FileZen 操作系统命令注入漏洞

FileZen is a device for secure file transfer and sharing via email or web interface. An OS command injection vulnerability exists in FileZen 3.0.0 - 4.2.7, 5.0.0 - 5.0.2. A remote attacker with administrator privileges can exploit this vulnerability to execute arbitrary OS commands...

9CVSS7.4AI score0.03541EPSS
SaveExploits1References4
NVD
NVD
added 2020/12/14 3:15 a.m.30 views

CVE-2020-5639

Directory traversal vulnerability in FileZen versions from V3.0.0 to V4.2.2 allows remote attackers to upload an arbitrary file in a specific directory via unspecified vectors. As a result, an arbitrary OS command may be executed...

10CVSS9.5AI score0.05009EPSS
SaveExploits0References3
OSV
OSV
added 2020/12/14 3:15 a.m.6 views

CVE-2020-5639

Directory traversal vulnerability in FileZen versions from V3.0.0 to V4.2.2 allows remote attackers to upload an arbitrary file in a specific directory via unspecified vectors. As a result, an arbitrary OS command may be executed...

9.8CVSS5.9AI score0.05009EPSS
SaveExploits0References3
Prion
Prion
added 2020/12/14 3:15 a.m.15 views

Directory traversal

Directory traversal vulnerability in FileZen versions from V3.0.0 to V4.2.2 allows remote attackers to upload an arbitrary file in a specific directory via unspecified vectors. As a result, an arbitrary OS command may be executed...

10CVSS9.4AI score0.05009EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2020/12/14 2:25 a.m.65 views

CVE-2020-5639

FileZen vulnerable to a directory traversal (CWE-22) in versions V3.0.0–V4.2.2, enabling a remote attacker to upload an arbitrary file to a specific directory and potentially execute arbitrary OS commands. Root cause is a directory traversal flaw in the affected FileZen appliances. Remediation pr...

10CVSS9.4AI score0.05009EPSS
SaveExploits0References3Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2020/12/10 6:21 a.m.4 views

FileZen vulnerable to directory traversal

Overview FileZen provided by Soliton Systems K.K. is an appliance for secure file transfer and sharing by mail or an web interface. FileZen contains a directory traversal vulnerability CWE-22. Soliton Systems K.K. reported this vulnerability to IPA to notify users of its solution through JVN...

10CVSS7.3AI score0.05009EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2020/12/10 12:0 a.m.13 views

Soliton Systems Kk FileZen Path Traversal Vulnerability

Soliton Systems Kk FileZen is a file hosting device from Soliton Systems Kk, Japan. The device features file storage, file transfer, file upload and download. A security vulnerability exists in Soliton Systems FileZen that originates from an input validation error when processing a directory...

10CVSS7.2AI score0.05009EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2020/12/10 12:0 a.m.51 views

JVN#12884935: FileZen vulnerable to directory traversal

FileZen provided by Soliton Systems K.K. is an appliance for secure file transfer and sharing by mail or an web interface. FileZen contains a directory traversal vulnerability CWE-22. Impact A remote attacker may upload an arbitrary file in the specific directory in the product. If a specialy...

10CVSS9.7AI score0.05009EPSS
SaveExploits0
NVD
NVD
added 2018/11/15 3:29 p.m.22 views

CVE-2018-0694

FileZen V3.0.0 to V4.2.1 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

10CVSS9.8AI score0.02374EPSS
SaveExploits0References2
OSV
OSV
added 2018/11/15 3:29 p.m.7 views

CVE-2018-0694

FileZen V3.0.0 to V4.2.1 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

9.8CVSS6.1AI score0.02374EPSS
SaveExploits0References2
NVD
NVD
added 2018/11/15 3:29 p.m.20 views

CVE-2018-0693

Directory traversal vulnerability in FileZen V3.0.0 to V4.2.1 allows remote attackers to upload an arbitrary file in the specific directory in FileZen via unspecified vectors...

7.5CVSS7.5AI score0.01947EPSS
SaveExploits0References2
Rows per page
Query Builder