Lucene search
+L

553 matches found

Positive Technologies
Positive Technologies
•added 2018/12/04 12:00 a.m.•2 views

PT-2018-11104

Name of the Vulnerable Software and Affected Versions ASUSTOR ADM version 3.1.1 Description A directory traversal issue in the File Explorer component allows attackers to view arbitrary files by modifying the file1 URL parameter. This issue is similar to a previously known problem. Recommendation...

7.5CVSS0.0174EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2018/12/04 12:00 a.m.•3 views

PT-2018-11110

Name of the Vulnerable Software and Affected Versions ASUSTOR ADM version 3.1.1 Description A cross-site scripting issue in File Explorer allows attackers to execute arbitrary JavaScript when a file is moved via a malicious filename. Recommendations For ASUSTOR ADM version 3.1.1, consider renamin...

5.4CVSS0.00545EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/04 12:00 a.m.•4 views

CVE-2018-12311: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to execute arbitrary JavaScript when a file is moved via a malicious filename...

5.4CVSS6.8AI score0.00545EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/12/04 12:00 a.m.•6 views

CVE-2018-12305: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript by uploading SVG images with embedded JavaScript...

6.1CVSS7AI score0.00692EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/12/04 12:00 a.m.•4 views

PT-2018-11103

Name of the Vulnerable Software and Affected Versions ASUSTOR ADM version 3.1.1 Description The issue allows attackers to execute JavaScript by uploading SVG images with embedded JavaScript, specifically through cross-site scripting in File Explorer. Recommendations For ASUSTOR ADM version 3.1.1,...

6.1CVSS0.00692EPSS
SaveExploits1References3
OSV
OSV
•added 2018/07/16 2:29 p.m.•26 views

DEBIAN-CVE-2014-2079

X File Explorer aka xfe might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares...

5.5CVSS5.5AI score0.004EPSS
SaveExploits1References1
NVD
NVD
•added 2018/07/16 2:29 p.m.•31 views

CVE-2014-2079

X File Explorer aka xfe might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares...

5.5CVSS5.6AI score0.004EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2018/07/16 2:29 p.m.•13 views

CVE-2014-2079

X File Explorer aka xfe might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares...

5.5CVSS5.7AI score0.004EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
•added 2018/07/16 2:29 p.m.•30 views

CVE-2014-2079

X File Explorer aka xfe might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares...

5.5CVSS6.2AI score0.004EPSS
SaveExploits1References1
Prion
Prion
•added 2018/07/16 2:29 p.m.•35 views

Directory traversal

X File Explorer aka xfe might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares...

2.1CVSS7.2AI score0.004EPSS
SaveExploits1References5Affected Software2
OSV
OSV
•added 2018/07/16 2:29 p.m.•13 views

CVE-2014-2079

X File Explorer aka xfe might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares...

5.5CVSS5.6AI score
SaveExploits0References10
CVE
CVE
•added 2018/07/16 2:00 p.m.•78 views

CVE-2014-2079

CVE-2014-2079 affects X File Explorer (xfe). The issue arises when creating new files on Samba or NFS shares: the user’s MASK is applied for permission settings instead of the share/server configuration, enabling local users to bypass intended access restrictions and potentially access arbitrary ...

5.5CVSS5.6AI score0.004EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2018/07/16 2:00 p.m.•42 views

CVE-2014-2079

X File Explorer aka xfe might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares...

5.6AI score0.004EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2018/07/16 2:00 p.m.•35 views

CVE-2014-2079

X File Explorer aka xfe might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares...

5.5CVSS2.7AI score0.004EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2018/07/16 12:00 a.m.•2 views

PT-2018-4192

Name of the Vulnerable Software and Affected Versions X File Explorer aka xfe affected versions not specified Description The issue allows local users to bypass intended access restrictions and gain access to arbitrary files. This is achieved by leveraging the failure to use directory masks when...

5.5CVSS0.004EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/16 12:00 a.m.•5 views

CVE-2014-2079: Undefined Security Weakness

X File Explorer aka xfe might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares...

5.5CVSS6.1AI score0.004EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2018/04/23 12:00 a.m.•86 views

Microsoft Windows: Prevent the usage of OneDrive for file storage

This policy setting lets you prevent apps and features from working with files on OneDrive. If you enable this policy setting: - Users can SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

7.3AI score
SaveExploits0References6
OpenVAS
OpenVAS
•added 2017/09/27 12:00 a.m.•40 views

Pydio Core Detection (HTTP)

HTTP based detection of Pydio Core. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.113003";...

7.4AI score
SaveExploits0References1
CNVD
CNVD
•added 2017/08/29 12:00 a.m.•14 views

ES File Explorer Directory Traversal Vulnerability

ES File Explorer ES File Explorer is a multifunctional cell phone file, program and process manager, which supports browsing and managing files between cell phone, computer, remote and Bluetooth. A directory traversal vulnerability exists in ES File Explorer version 3.2.4.1. An attacker could...

7.5CVSS7.6AI score0.03118EPSS
SaveExploits4References1
NVD
NVD
•added 2017/08/28 3:29 p.m.•20 views

CVE-2015-1876

Directory traversal vulnerability in ES File Explorer 3.2.4.1...

7.5CVSS7.5AI score0.03118EPSS
SaveExploits4References1
Rows per page
Query Builder