Lucene search
+L

140 matches found

CNNVD
CNNVD
•added 2024/11/22 12:00 a.m.•18 views

Gladinet CentreStack 安全漏洞

Gladinet CentreStack is a premier mobile access and secure sharing solution from Gladinet USA. Provides self-hosted cloud storage. A security vulnerability exists in Gladinet CentreStack version v13.12.9934.54690. An attacker exploiting this vulnerability could inject malicious JavaScript into a...

5.4CVSS6.6AI score0.00376EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/11/22 12:00 a.m.•15 views

PT-2024-27749 · Gladinet · Gladinet Centrestack

Name of the Vulnerable Software and Affected Versions: Gladinet CentreStack version 13.12.9934.54690 Description: The issue allows attackers to access sensitive data or execute arbitrary commands via a crafted payload injected into the username field in the login page. Recommendations: For Gladin...

9.8CVSS7.7AI score0.0101EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2024/11/22 12:00 a.m.•39 views

CVE-2024-37783

A reflected cross-site scripting XSS vulnerability in Gladinet CentreStack v13.12.9934.54690 allows attackers to inject malicious JavaScript into the web browser of a victim via the sessionId parameter at /portal/ForgotPassword.aspx...

0.00376EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/11/22 12:00 a.m.•14 views

CVE-2024-37783

A reflected cross-site scripting XSS vulnerability in Gladinet CentreStack v13.12.9934.54690 allows attackers to inject malicious JavaScript into the web browser of a victim via the sessionId parameter at /portal/ForgotPassword.aspx...

5.7AI score0.00376EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/11/22 12:00 a.m.•39 views

CVE-2024-37782

An LDAP injection vulnerability in the login page of Gladinet CentreStack v13.12.9934.54690 allows attackers to access sensitive data or execute arbitrary commands via a crafted payload injected into the username field...

0.0101EPSS
SaveExploits0References3
NVD
NVD
•added 2023/03/31 4:15 p.m.•28 views

CVE-2023-26830

An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before 13.5.9808 allows authenticated attackers to execute arbitrary code by uploading malicious files to the server...

7.2CVSS7.3AI score0.01072EPSS
SaveExploits1References1
NVD
NVD
•added 2023/03/31 4:15 p.m.•21 views

CVE-2023-26829

An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to set a new password for any valid user account, without needing the previous known password, resulting in a full authentication bypass...

9.8CVSS9.7AI score0.01209EPSS
SaveExploits1References1
OSV
OSV
•added 2023/03/31 4:15 p.m.•12 views

CVE-2023-26829

An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to set a new password for any valid user account, without needing the previous known password, resulting in a full authentication bypass...

9.8CVSS7.3AI score0.01209EPSS
SaveExploits1References1
Prion
Prion
•added 2023/03/31 4:15 p.m.•37 views

Unrestricted file upload

An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before 13.5.9808 allows authenticated attackers to execute arbitrary code by uploading malicious files to the server...

5.8CVSS7.2AI score0.01072EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/03/31 12:00 a.m.•14 views

PT-2023-20813 · Gladinet · Gladinet Centrestack

Name of the Vulnerable Software and Affected Versions: Gladinet CentreStack versions prior to 13.5.9808 Description: An unrestricted file upload vulnerability in the administrative portal branding component allows authenticated attackers to execute arbitrary code by uploading malicious files to t...

7.2CVSS7.2AI score0.01072EPSS
SaveExploits1References4
CVE
CVE
•added 2023/03/31 12:00 a.m.•64 views

CVE-2023-26830

CVE-2023-26830 covers an unrestricted file upload flaw in the Gladinet CentreStack administrative portal branding component, affecting versions prior to 13.5.9808 . The vulnerability allows an authenticated attacker to upload malicious files to the server and execute arbitrary code. The issue is ...

7.2CVSS7.3AI score0.01072EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/03/31 12:00 a.m.•5 views

CVE-2023-26830

An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before 13.5.9808 allows authenticated attackers to execute arbitrary code by uploading malicious files to the server...

7.6AI score0.01072EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/03/31 12:00 a.m.•40 views

CVE-2023-26830

An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before 13.5.9808 allows authenticated attackers to execute arbitrary code by uploading malicious files to the server...

7.5AI score0.01072EPSS
SaveExploits1References1
CVE
CVE
•added 2023/03/31 12:00 a.m.•60 views

CVE-2023-26829

CVE-2023-26829 affects Gladinet CentreStack before 13.5.9808. The issue is an authentication bypass in the Password Reset component that lets remote attackers set a new password for any valid user without the previous password, resulting in full authentication bypass. Impact is authenticated acce...

9.8CVSS9.6AI score0.01209EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/03/31 12:00 a.m.•7 views

CVE-2023-26829

An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to set a new password for any valid user account, without needing the previous known password, resulting in a full authentication bypass...

7.7AI score0.01209EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/31 12:00 a.m.•3 views

CVE-2023-26829: Incorrect Authorization

An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to set a new password for any valid user account, without needing the previous known password, resulting in a full authentication bypass...

9.8CVSS5.9AI score0.01209EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/03/31 12:00 a.m.•16 views

Gladinet CentreStack 代码问题漏洞

Gladinet CentreStack is a premier mobile access and secure sharing solution from Gladinet USA. Provides self-hosted cloud storage. A security vulnerability exists in Gladinet CentreStack versions prior to 13.5.9808. An attacker could exploit the vulnerability to execute arbitrary code by uploadin...

7.2CVSS7.6AI score0.01072EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/31 12:00 a.m.•0 views

CVE-2023-26830: Unrestricted Upload of File with Dangerous Type

An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before 13.5.9808 allows authenticated attackers to execute arbitrary code by uploading malicious files to the server...

7.2CVSS6.5AI score0.01072EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/03/31 12:00 a.m.•14 views

Gladinet CentreStack 安全漏洞

Gladinet CentreStack is a premier mobile access and secure sharing solution from Gladinet USA. Provides self-hosted cloud storage. A security vulnerability exists in Gladinet CentreStack versions prior to 13.5.9808. An attacker exploited the vulnerability to set a new password for any valid user...

9.8CVSS8.4AI score0.01209EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/03/31 12:00 a.m.•1 views

PT-2023-20811

Name of the Vulnerable Software and Affected Versions Gladinet CentreStack versions prior to 13.5.9808 Description An authentication bypass issue in the Password Reset component allows remote attackers to set a new password for any valid user account without needing the previous known password,...

9.8CVSS0.01209EPSS
SaveExploits1References5
Rows per page
Query Builder