Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

415 matches found

RedhatCVE
RedhatCVE•added 2026/03/26 3:00 p.m.•10 views

CVE-2026-33330

FileRise is a self-hosted web file manager / WebDAV server. Prior to version 3.10.0, a broken access control issue in FileRise's ONLYOFFICE integration allows an authenticated user with read-only access to obtain a signed save callbackUrl for a file and then directly forge the ONLYOFFICE save...

7.1CVSS5.7AI score0.00377EPSS
SaveExploits1References1
NVD
NVD•added 2026/03/24 8:16 p.m.•12 views

CVE-2026-33330

FileRise is a self-hosted web file manager / WebDAV server. Prior to version 3.10.0, a broken access control issue in FileRise's ONLYOFFICE integration allows an authenticated user with read-only access to obtain a signed save callbackUrl for a file and then directly forge the ONLYOFFICE save...

7.1CVSS0.00377EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB•added 2026/03/24 7:15 p.m.•10 views

CVE-2026-33330

FileRise is a self-hosted web file manager / WebDAV server. Prior to version 3.10.0, a broken access control issue in FileRise's ONLYOFFICE integration allows an authenticated user with read-only access to obtain a signed save callbackUrl for a file and then directly forge the ONLYOFFICE save...

7.1CVSS5.7AI score0.00377EPSS
SaveExploits1References4Affected Software1
OSV
OSV•added 2026/03/24 7:15 p.m.•12 views

CVE-2026-33330 FileRise ONLYOFFICE integration allows read-only users to overwrite files via forged save callback

FileRise is a self-hosted web file manager / WebDAV server. Prior to version 3.10.0, a broken access control issue in FileRise's ONLYOFFICE integration allows an authenticated user with read-only access to obtain a signed save callbackUrl for a file and then directly forge the ONLYOFFICE save...

7.1CVSS5.8AI score
SaveExploits0References5
CVE
CVE•added 2026/03/24 7:15 p.m.•29 views

CVE-2026-33330

The CVE-2026-33330 issue affects FileRise (self-hosted web file manager / WebDAV) through the ONLYOFFICE integration. A broken access control flaw allows an authenticated user with read-only privileges to obtain a signed save callback URL for a file and directly forge the ONLYOFFICE save callback...

7.1CVSS5.7AI score0.00377EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment•added 2026/03/24 7:15 p.m.•5 views

CVE-2026-33330 FileRise ONLYOFFICE integration allows read-only users to overwrite files via forged save callback

FileRise is a self-hosted web file manager / WebDAV server. Prior to version 3.10.0, a broken access control issue in FileRise's ONLYOFFICE integration allows an authenticated user with read-only access to obtain a signed save callbackUrl for a file and then directly forge the ONLYOFFICE save...

7.1CVSS5.7AI score0.00377EPSS
SaveExploits1References3
Cvelist
Cvelist•added 2026/03/24 7:15 p.m.•31 views

CVE-2026-33330 FileRise ONLYOFFICE integration allows read-only users to overwrite files via forged save callback

FileRise is a self-hosted web file manager / WebDAV server. Prior to version 3.10.0, a broken access control issue in FileRise's ONLYOFFICE integration allows an authenticated user with read-only access to obtain a signed save callbackUrl for a file and then directly forge the ONLYOFFICE save...

7.1CVSS0.00377EPSS
SaveExploits1References3
EUVD
EUVD•added 2026/03/24 7:15 p.m.•25 views

EUVD-2026-14994

FileRise is a self-hosted web file manager / WebDAV server. Prior to version 3.10.0, a broken access control issue in FileRise's ONLYOFFICE integration allows an authenticated user with read-only access to obtain a signed save callbackUrl for a file and then directly forge the ONLYOFFICE save...

7.1CVSS5.7AI score0.00377EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies•added 2026/03/24 12:00 a.m.•15 views

PT-2026-27491

FileRise is a self-hosted web file manager / WebDAV server. Prior to version 3.10.0, a broken access control issue in FileRise's ONLYOFFICE integration allows an authenticated user with read-only access to obtain a signed save callbackUrl for a file and then directly forge the ONLYOFFICE save...

7.1CVSS5.7AI score0.00377EPSS
SaveExploits1References3
CNNVD
CNNVD•added 2026/03/24 12:00 a.m.•19 views

FileRise 安全漏洞

FileRise is a lightweight, self-hosted web-based file manager developed by Ryan. Versions of FileRise prior to 3.10.0 contained security vulnerabilities. These vulnerabilities stemmed from access control flaws in the ONLYOFFICE integration, which could allow authenticated users with read-only...

7.1CVSS5.8AI score0.00377EPSS
SaveExploits1References3
Patchstack
Patchstack•added 2026/02/03 9:15 a.m.•12 views

WordPress ONLYOFFICE DocSpace plugin <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin ONLYOFFICE DocSpace versions = 2.1.1...

6.4CVSS5.3AI score0.00305EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC•added 2025/12/29 12:00 a.m.•14 views

The vulnerability of the office online package ONLYOFFICE Docs, related to the lack of protective measures for the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the office online package ONLYOFFICE Docs DocumentServer is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS5.6AI score0.00202EPSS
SaveExploits0References3Affected Software2
RedhatCVE
RedhatCVE•added 2025/12/26 8:18 p.m.•21 views

CVE-2025-68936

ONLYOFFICE Docs before 9.2.1 allows XSS via the Color theme name. This is related to DocumentServer...

6.4CVSS6.2AI score0.00202EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2025/12/26 8:18 p.m.•23 views

CVE-2025-68935

ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window. This is related to DocumentServer...

6.4CVSS6.2AI score0.00202EPSS
SaveExploits0References1
EUVD
EUVD•added 2025/12/25 9:30 p.m.•12 views

EUVD-2025-205392

ONLYOFFICE Docs before 9.2.1 allows XSS via the Color theme name. This is related to DocumentServer...

6.4CVSS5.7AI score0.00202EPSS
SaveExploits0References2
EUVD
EUVD•added 2025/12/25 9:30 p.m.•20 views

EUVD-2025-205393

ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window. This is related to DocumentServer...

6.4CVSS5.7AI score0.00202EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE•added 2025/12/25 9:17 p.m.•16 views

CVE-2025-68917

ONLYOFFICE Docs before 9.2.1 allows XSS in the textarea of the comment editing form. This is related to DocumentServer...

6.4CVSS6.3AI score0.00171EPSS
SaveExploits0References1
NVD
NVD•added 2025/12/25 8:15 p.m.•17 views

CVE-2025-68936

ONLYOFFICE Docs before 9.2.1 allows XSS via the Color theme name. This is related to DocumentServer...

6.4CVSS0.00202EPSS
SaveExploits0References1
NVD
NVD•added 2025/12/25 8:15 p.m.•20 views

CVE-2025-68935

ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window. This is related to DocumentServer...

6.4CVSS0.00202EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2025/12/25 8:07 p.m.•4 views

CVE-2025-68936

ONLYOFFICE Docs before 9.2.1 allows XSS via the Color theme name. This is related to DocumentServer...

6.4CVSS5.8AI score0.00202EPSS
SaveExploits0References1
Rows per page
Query Builder