Lucene search
+L

3349 matches found

CNNVD
CNNVD
added 2021/01/07 12:00 a.m.13 views

QuiXplorer 跨站脚本漏洞

QuiXplorer is a web-based file manager that supports document uploading, downloading, searching, editing and more. Quixplorer has an input validation error vulnerability in version 2.4.1 and earlier, which originates from a cross-site scripting attack caused by improper user-supplied input...

6.1CVSS6.2AI score0.02852EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/01/05 12:00 a.m.11 views

Veno File Manager Directory Traversal Vulnerability

Veno File Manager is a simple and flexible file manager. A directory traversal vulnerability exists in Veno File Manager 3.5.6. An attacker can use this vulnerability to download sensitive files from a server...

7.5CVSS6.9AI score0.0223EPSS
SaveExploits1References1
NVD
NVD
added 2021/01/04 3:15 p.m.25 views

CVE-2020-22550

Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server...

7.5CVSS7.5AI score0.0223EPSS
SaveExploits1References2
OSV
OSV
added 2021/01/04 3:15 p.m.9 views

CVE-2020-22550

Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server...

7.5CVSS7.1AI score0.0223EPSS
SaveExploits1References2
Prion
Prion
added 2021/01/04 3:15 p.m.26 views

Directory traversal

Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server...

5CVSS7.5AI score0.0223EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2021/01/04 2:19 p.m.53 views

CVE-2020-22550

CVE-2020-22550 affects Veno File Manager 3.5.6 and is described as a directory traversal vulnerability that allows an attacker to download sensitive files from the server. The connected documents corroborate the same issue across multiple sources (e.g., NVD, Red Hat, CNVD, CNVD CNVD, RH, etc.), s...

7.5CVSS7.4AI score0.0223EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/01/04 2:19 p.m.29 views

CVE-2020-22550

Veno File Manager 3.5.6 is affected by a directory traversal vulnerability. Using the traversal allows an attacker to download sensitive files from the server...

7.5AI score0.0223EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/01/04 12:00 a.m.11 views

VFM Veno File Manager 路径遍历漏洞

Veno File Manager is a simple and flexible file manager. A directory traversal vulnerability exists in Veno File Manager 3.5.6. An attacker can use this vulnerability to download sensitive files from a server...

7.5CVSS7.1AI score0.0223EPSS
SaveExploits1References3
NVD
NVD
added 2020/12/30 8:15 p.m.23 views

CVE-2020-35173

The Amaze File Manager application before 3.4.2 for Android does not properly restrict intents for controlling the FTP server aka services.ftpservice.FTPReceiver.ACTIONSTARTFTPSERVER and services.ftpservice.FTPReceiver.ACTIONSTOPFTPSERVER...

9.8CVSS9.3AI score0.01719EPSS
SaveExploits0References3
OSV
OSV
added 2020/12/30 8:15 p.m.13 views

CVE-2020-35173

The Amaze File Manager application before 3.4.2 for Android does not properly restrict intents for controlling the FTP server aka services.ftpservice.FTPReceiver.ACTIONSTARTFTPSERVER and services.ftpservice.FTPReceiver.ACTIONSTOPFTPSERVER...

9.8CVSS7.2AI score
SaveExploits0References3
Prion
Prion
added 2020/12/30 8:15 p.m.23 views

Code injection

The Amaze File Manager application before 3.4.2 for Android does not properly restrict intents for controlling the FTP server aka services.ftpservice.FTPReceiver.ACTIONSTARTFTPSERVER and services.ftpservice.FTPReceiver.ACTIONSTOPFTPSERVER...

7.5CVSS9.1AI score0.01719EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2020/12/30 7:04 p.m.33 views

CVE-2020-35173

The Amaze File Manager application before 3.4.2 for Android does not properly restrict intents for controlling the FTP server aka services.ftpservice.FTPReceiver.ACTIONSTARTFTPSERVER and services.ftpservice.FTPReceiver.ACTIONSTOPFTPSERVER...

9.4AI score0.01719EPSS
SaveExploits0References3
CVE
CVE
added 2020/12/30 7:04 p.m.58 views

CVE-2020-35173

The Amaze File Manager Android app is affected by CVE-2020-35173 (before 3.4.2). The root cause is improper restriction of intents for controlling the FTP server (FTPReceiver.ACTION_START_FTPSERVER and ACTION_STOP_FTPSERVER). This could allow unauthorized control of the FTP service; CVSS scores i...

9.8CVSS9.2AI score0.01719EPSS
SaveExploits0References3Affected Software1
zdt
zdt
added 2020/12/24 12:00 a.m.101 views

SUPREMO 4.1.3.2348 Privilege Escalation Vulnerability

Details ======= Subject: Local Privilege Escalation Product: SUPREMO by Nanosystems S.r.l. Vendor Homepage: https://www.supremocontrol.com/ Vendor Status: fixed version released Vulnerable Version: 4.1.3.2348 No other version was tested, but it is believed for the older versions to be also...

7.8CVSS7.8AI score0.0145EPSS
SaveExploits3
NVD
NVD
added 2020/12/22 6:15 p.m.76 views

CVE-2020-25106

Nanosystems SupRemo 4.1.3.2348 allows attackers to obtain LocalSystem access because File Manager can be used to rename Supremo.exe and then upload a Trojan horse with the Supremo.exe filename...

9.3CVSS7.6AI score0.0145EPSS
SaveExploits3References3
OSV
OSV
added 2020/12/22 6:15 p.m.6 views

CVE-2020-25106

Nanosystems SupRemo 4.1.3.2348 allows attackers to obtain LocalSystem access because File Manager can be used to rename Supremo.exe and then upload a Trojan horse with the Supremo.exe filename...

7.8CVSS7.1AI score0.0145EPSS
SaveExploits3References3
Prion
Prion
added 2020/12/22 6:15 p.m.33 views

Design/Logic Flaw

Nanosystems SupRemo 4.1.3.2348 allows attackers to obtain LocalSystem access because File Manager can be used to rename Supremo.exe and then upload a Trojan horse with the Supremo.exe filename...

9.3CVSS7.5AI score0.0145EPSS
SaveExploits3References3Affected Software1
Cvelist
Cvelist
added 2020/12/22 5:54 p.m.60 views

CVE-2020-25106

Nanosystems SupRemo 4.1.3.2348 allows attackers to obtain LocalSystem access because File Manager can be used to rename Supremo.exe and then upload a Trojan horse with the Supremo.exe filename...

7.6AI score0.0145EPSS
SaveExploits3References3
BDU FSTEC
BDU FSTEC
added 2020/12/18 12:00 a.m.10 views

The vulnerability of the Adobe Bridge file manager, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user...

10CVSS7.8AI score0.03832EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/18 12:00 a.m.11 views

The vulnerability of the Adobe Bridge file manager, related to reading beyond the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user...

10CVSS7.8AI score0.04438EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder