CVE-2025-14602

vsDesk generates uploaded file names using a predictable timestamp-based method, allowing remote attackers to guess filenames and access uploaded files. Patched in version 14.0101; CVSS 4.0 scores it MEDIUM (5.3). No in-the-wild exploitation reported. Patch available from https://vsdesk.ru/. Advi...

PT-2014-3649

Name of the Vulnerable Software and Affected Versions Django versions prior to 1.4.14 Django versions 1.5.x prior to 1.5.9 Django versions 1.6.x prior to 1.6.6 Django versions 1.7 before release candidate 3 Description The issue concerns the default configuration of the file upload handling syste...

CVE-2002-2346

CVE-2002-2346 affects phpBB 2.0 through 2.0.3. The vulnerability arises in how avatar file names are generated: they use hex-encoded client IP addresses, allowing remote attackers to obtain the client’s IP address by inspecting the uploaded avatar filename. The connected Red Hat and CVE records c...