Lucene search
+L

184 matches found

Positive Technologies
Positive Technologies
added 2024/03/19 12:0 a.m.8 views

PT-2024-13062 · Claris International · Filemaker Pro.App +1

Name of the Vulnerable Software and Affected Versions: FileMaker Pro.app versions affected versions not specified Claris Pro.app versions affected versions not specified Description: A dylib hijacking issue has been fixed by Claris International in FileMaker Pro.app and Claris Pro.app on macOS...

7.8CVSS7.2AI score0.00179EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/03/19 12:0 a.m.8 views

Claris FileMaker Pro Security Vulnerability

Claris FileMaker Pro is a cross-platform relational database application from Claris USA. It integrates a database engine with a graphical user interface Gui and security features that allow users to modify the database, or tables, by dragging new elements onto layouts, screens. A security...

7.8CVSS6.7AI score0.00179EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/11/07 12:0 a.m.7 views

FMDataAPI Cross-Site Scripting Vulnerability

FMDataAPI is a class of Masayuki Nii personal developer. It is used to access FileMaker databases using the FileMaker Data API. A cross-site scripting vulnerability exists in FMDataAPI version 22 and earlier, which stems from a problem in the file FMDataAPISample.php that can lead to cross-site...

6.1CVSS5.8AI score0.00626EPSS
SaveExploits0References2
OSV
OSV
added 2021/11/22 10:15 p.m.6 views

CVE-2021-44147

An XML External Entity issue in Claris FileMaker Pro and Server including WebDirect before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks...

5.5CVSS5.8AI score0.01134EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/11/22 10:15 p.m.4 views

CVE-2021-44147

An XML External Entity issue in Claris FileMaker Pro and Server including WebDirect before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks...

5.5CVSS6AI score0.01134EPSS
SaveExploits1References3
NVD
NVD
added 2021/11/22 10:15 p.m.24 views

CVE-2021-44147

An XML External Entity issue in Claris FileMaker Pro and Server including WebDirect before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks...

5.5CVSS0.01134EPSS
SaveExploits1References2
Prion
Prion
added 2021/11/22 10:15 p.m.21 views

Xxe

An XML External Entity issue in Claris FileMaker Pro and Server including WebDirect before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks...

4.3CVSS5.4AI score0.01134EPSS
SaveExploits1References2Affected Software2
CVE
CVE
added 2021/11/22 9:26 p.m.82 views

CVE-2021-44147

CVE-2021-44147 affects Claris FileMaker Pro and Server (including WebDirect). The vulnerability is an XML External Entity (XXE) issue in which a crafted XML/Excel document can disclose local files and enable server-side request forgery. Impact: local file disclosure and SSRF capabilities as descr...

5.5CVSS5.4AI score0.01134EPSS
SaveExploits1References2Affected Software2
Cvelist
Cvelist
added 2021/11/22 9:26 p.m.25 views

CVE-2021-44147

An XML External Entity issue in Claris FileMaker Pro and Server including WebDirect before 19.4.1 allows a remote attacker to disclose local files via a crafted XML/Excel document and perform server-side request forgery attacks...

5.7AI score0.01134EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/11/22 12:0 a.m.9 views

Claris FileMaker Pro 代码问题漏洞

Claris FileMaker Pro is a cross-platform relational database application from Claris USA. It integrates a database engine with a graphical user interface Gui and security features that allow users to modify the database, or tables, by dragging new elements onto layouts, screens. A security...

5.5CVSS6AI score0.01134EPSS
SaveExploits1References4
NVD
NVD
added 2020/02/11 2:15 p.m.22 views

CVE-2014-8347

An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 and Filemaker Pro Advanced 12.04, which could let a malicious user obtain elevated privileges...

7.8CVSS7.6AI score0.01351EPSS
SaveExploits5References5
Prion
Prion
added 2020/02/11 2:15 p.m.17 views

Authentication flaw

An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 and Filemaker Pro Advanced 12.04, which could let a malicious user obtain elevated privileges...

4.6CVSS7AI score0.01351EPSS
SaveExploits5References5Affected Software2
CVE
CVE
added 2020/02/11 1:36 p.m.57 views

CVE-2014-8347

CVE-2014-8347 describes an authentication bypass in the MatchPasswordData function of DBEngine.dll used by FileMaker Pro 13.0v3 and FileMaker Pro Advanced 12.0v4. A local attacker could leverage this to gain elevated privileges, effectively bypassing login and obtaining higher access within the l...

7.8CVSS7.5AI score0.01351EPSS
SaveExploits5References5Affected Software2
Cvelist
Cvelist
added 2020/02/11 1:36 p.m.28 views

CVE-2014-8347

An Authentication Bypass vulnerability exists in the MatchPasswordData function in DBEngine.dll in Filemaker Pro 13.03 and Filemaker Pro Advanced 12.04, which could let a malicious user obtain elevated privileges...

7.6AI score0.01351EPSS
SaveExploits5References5
OpenVAS
OpenVAS
added 2019/11/28 12:0 a.m.16 views

Claris FileMaker Pro Detection (HTTP)

HTTP based detection of Claris FileMaker Pro. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:filemaker:filemakerpro:";...

7.4AI score
SaveExploits0References2
Openbugbounty
Openbugbounty
added 2017/12/18 8:11 p.m.10 views

community.filemaker.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-455100 Description| Value ---|--- Affected Website:| community.filemaker.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Shee...

6.9AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/05/14 2:33 p.m.14 views

help.filemaker.com XSS vulnerability

Vulnerable URL: https://help.filemaker.com/ci/fattach/get/203076/1494772391/filename/svgxss.svg Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

6.3AI score
SaveExploits0
CNVD
CNVD
added 2017/04/17 12:0 a.m.3 views

Unspecified Vulnerability in Drupal Filemaker Form Module

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. An unspecified vulnerability exists in the Drupal Filemaker Form module, for which a detailed vulnerability description is not currently available...

6.9AI score
SaveExploits0References1
Drupal
Drupal
added 2017/04/12 12:0 a.m.16 views

Filemaker Form - Critical - Unsupported - SA-CONTRIB-2017-37

Easily create forms in Drupal that submit data to Filemaker databases which are hosted on Filemaker Server. The security team is marking this module unsupported. There is a known security issue with the module that has not been fixed by the maintainer. If you would like to maintain this module,...

7.2AI score
SaveExploits0References8
CNVD
CNVD
added 2016/11/28 12:0 a.m.1 views

Cross-site scripting vulnerability in Drupal plugin FileMaker

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site scripting vulnerability exists in the Drupal plugin FileMaker. The program fails to filter user-supplied input, allowing an attacker to construct a malicious...

6.7AI score
SaveExploits0
Rows per page
Query Builder