6 matches found
CVE-2026-67248
A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not properly validated before being decoded and copied into a fixed-size stack buffer. An authenticated attacker can exploit this issue to cause denial ...
CVE-2026-20939
CVE-2026-20939: Windows File Explorer information disclosure allowing a locally authenticated user to view sensitive data. The issue has a CVSSv3.1 base score of 5.5 (Local, Low attack complexity, Low privileges, Confidentiality impact: High). Microsoft has released fixes in January 2026 security...
CVE-2025-56807
A Stored Cross-Site Scripting (XSS) vulnerability exists in FairSketch RISE Ultimate Project Manager & CRM version 3.9.4 within the File Manager functionality. The flaw is caused by insufficient input sanitization of the title parameter when creating new folders in the admin dashboard. An attacke...
CVE-2025-1983 Stored Cross-Site Scripting in Ready_
A cross-site scripting XSS vulnerability in Ready's File Explorer upload functionality allows injection of arbitrary JavaScript code in filename. Injected content is stored on server and is executed every time a user interacts with the uploaded file...
CVE-2025-1983 Stored Cross-Site Scripting in Ready_
A cross-site scripting XSS vulnerability in Ready's File Explorer upload functionality allows injection of arbitrary JavaScript code in filename. Injected content is stored on server and is executed every time a user interacts with the uploaded file...