143235 matches found
EUVD-2026-45990
Directory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via a crafted request...
CVE-2026-51026
CVE-2026-51026 affects FileThingie v2.5.7 with a directory traversal vulnerability that allows a remote attacker to obtain sensitive information via a crafted request. CVSSv3.1 metrics show AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (base score 6.5, MEDIUM). No remediation details are provided in the su...
CVE-2026-51027: Exposure of Sensitive Information to an Unauthorized Actor
An issue in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via the ft2.php component...
ROS-20260720-73-0017
The vulnerability of the Accessibility component in Google Chrome browser relates to memory overflow outside the bounds of the program. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information through a specially created web page...
ROS-20260720-73-0012
The vulnerability of Google Chrome’s browser extensions is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information that is protected by these extensions...
CVE-2026-51026
Directory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via a crafted request...
PT-2026-61734
Name of the Vulnerable Software and Affected Versions FlareSolverr versions prior to 3.4.7 Description A server-side request forgery SSRF issue exists in the '/v1' API endpoint. This flaw allows a remote attacker to induce the server to make requests to an unintended location, potentially enablin...
CVE-2026-51031
FlareSolverr before version 3.4.7 contains a server-side request forgery SSRF vulnerability in the /v1 API endpoint. This allows a remote attacker to obtain sensitive information...
CVE-2026-51027
An issue in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via the ft2.php component...
PT-2026-61619
Name of the Vulnerable Software and Affected Versions FileThingie version 2.5.7 Description A directory traversal issue allows a remote attacker to obtain sensitive information by sending a crafted request. Directory traversal is a flaw that allows an attacker to access files and directories stor...
Cisco ASA/FTD WebVPN/AnyConnect Improper Input Validation (CVE-2020-3452)
A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and read sensitive files on a targeted system. The vulnerability i...
CVE-2026-46410: Exposure of Sensitive Information to an Unauthorized Actor
FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable and 1.4.1-beta may leak some sensitive info, such as source and path. Versions 1.3.2-stable and 1.4.1-beta fix the issue. No known workarounds are available...
PT-2026-62024
It was discovered that FreeType incorrectly handled certain variable font files. An attacker could possibly use this issue to cause FreeType to crash, resulting in a denial of service, or obtain sensitive information...
PT-2026-61551
Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 3.2.0 Description Custom API routes fail to validate namespace and database scope, which allows authenticated users to invoke endpoints across different namespaces or databases. An attacker with valid credentials fo...
PT-2026-62023
It was discovered that FreeRDP contained multiple security issues. An attacker could possibly use these issues to obtain sensitive information, cause FreeRDP to crash, resulting in a denial of service, or execute arbitrary code...
TencentOS Server 3: python-urllib3 (TSSA-2026:0624)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0624 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
Vulnerability of the JavaScript component: Mozilla Firefox’s WebAssembly browser allows attackers to disclose protected information.
JavaScript component vulnerability: Mozilla Firefox’s WebAssembly browser is vulnerable due to an incorrect pointer dereferencing. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information...
The vulnerability of the Windows Cloud Files Mini Filter driver allows a hacker to disclose protected information.
The vulnerability of the Windows Cloud Files Mini Filter driver in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
The vulnerability of the USB Audio Class driver for Windows operating systems allows attackers to disclose protected information.
The vulnerability of the USB Audio Class driver for Windows operating systems is related to reading data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
