Lucene search
+L

26 matches found

NVD
NVD
•added 2026/09/23 6:17 p.m.•26 views

CVE-2026-86930

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3...

9.1CVSS0.0029EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/23 5:20 p.m.•49 views

CVE-2026-86930

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3...

0.0029EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/23 5:20 p.m.•27 views

CVE-2026-86930

An out-of-bounds read vulnerability exists in FileMaker Server for Linux . An attacker can upload a specially crafted image file to a container field, which causes the system to disclose process memory during thumbnail generation within FileMaker WebDirect . This vulnerability is addressed in Fil...

9.1CVSS5.8AI score0.0029EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/09/23 5:20 p.m.•15 views

CVE-2026-86930

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3...

5.8AI score0.0029EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/23 5:20 p.m.•15 views

EUVD-2026-85428

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3...

5.8AI score0.0029EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•22 views

CVE-2026-86930: Out-of-bounds Read

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3...

9.1CVSS5.8AI score0.0029EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•11 views

PT-2026-97423

Name of the Vulnerable Software and Affected Versions FileMaker Server for Linux versions prior to 26.0.3 Description An out-of-bounds read occurs when an attacker uploads a specially crafted image file to a container field. This allows the disclosure of process memory during the thumbnail...

9.1CVSS5.8AI score0.0029EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/02/25 10:20 p.m.•19 views

CVE-2025-46320

A cross-site scripting XSS vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code execution. This vulnerability has been fully addressed in FileMaker Server 22.0.4 and FileMaker Server 21.1.7...

6.1CVSS5.5AI score0.00227EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/24 9:16 p.m.•26 views

CVE-2025-46320

A cross-site scripting XSS vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code execution. This vulnerability has been fully addressed in FileMaker Server 22.0.4 and FileMaker Server 21.1.7...

6.1CVSS0.00227EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/24 8:30 p.m.•28 views

CVE-2025-46320

A cross-site scripting XSS vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code execution. This vulnerability has been fully addressed in FileMaker Server 22.0.4 and FileMaker Server 21.1.7...

6.1CVSS5.9AI score0.00227EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/24 8:30 p.m.•13 views

CVE-2025-46320

A cross-site scripting XSS vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code execution. This vulnerability has been fully addressed in FileMaker Server 22.0.4 and FileMaker Server 21.1.7...

6AI score0.00227EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/24 8:30 p.m.•34 views

CVE-2025-46320

A cross-site scripting (XSS) vulnerability exists in the FileMaker WebDirect custom homepage component of FileMaker Server . The root cause involves improper neutralization of input during web page generation, which could lead to unauthorized access and remote code execution . This issue has been...

6.1CVSS6AI score0.00227EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/02/24 8:30 p.m.•39 views

CVE-2025-46320

A cross-site scripting XSS vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code execution. This vulnerability has been fully addressed in FileMaker Server 22.0.4 and FileMaker Server 21.1.7...

0.00227EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/24 12:00 a.m.•7 views

CVE-2025-46320: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code execution. This vulnerability has been fully addressed in FileMaker Server 22.0.4 and FileMaker Server 21.1.7...

6.1CVSS6AI score0.00227EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/24 12:00 a.m.•25 views

FileMaker Server 安全漏洞

FileMaker Server is an enterprise-level database server software developed by FileMaker Corporation, used for managing and sharing FileMaker databases. Versions of FileMaker Server prior to 22.0.4 and 21.1.7 contained security vulnerabilities. These vulnerabilities stemmed from cross-site scripti...

6.1CVSS6AI score0.00227EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/24 12:00 a.m.•24 views

PT-2026-21797

Name of the Vulnerable Software and Affected Versions FileMaker versions prior to 22.0.4 FileMaker versions prior to 21.1.7 Description A cross-site scripting XSS issue exists in FileMaker WebDirect custom homepages. Successful exploitation of this issue could allow for unauthorized access and...

6.1CVSS5.1AI score0.00227EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/23 10:14 a.m.•19 views

CVE-2024-27794

Claris FileMaker Server before version 20.3.2 was susceptible to a reflected Cross-Site Scripting vulnerability due to an improperly handled parameter in the FileMaker WebDirect login endpoint. The vulnerability was resolved in FileMaker Server 20.3.2 by escaping the HTML contents of the login...

6.1CVSS6.2AI score0.00308EPSS
SaveExploits0References1
OSV
OSV
•added 2024/04/15 11:15 p.m.•21 views

CVE-2024-27794

Claris FileMaker Server before version 20.3.2 was susceptible to a reflected Cross-Site Scripting vulnerability due to an improperly handled parameter in the FileMaker WebDirect login endpoint. The vulnerability was resolved in FileMaker Server 20.3.2 by escaping the HTML contents of the login...

6.1CVSS5.8AI score0.00308EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/15 10:16 p.m.•39 views

CVE-2024-27794

Claris FileMaker Server before version 20.3.2 was susceptible to a reflected Cross-Site Scripting vulnerability due to an improperly handled parameter in the FileMaker WebDirect login endpoint. The vulnerability was resolved in FileMaker Server 20.3.2 by escaping the HTML contents of the login...

6AI score0.00308EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/15 12:00 a.m.•21 views

FileMaker Server 安全漏洞

FileMaker Server is an enterprise-class database server software from FileMaker, Inc. for managing and sharing FileMaker databases. A security vulnerability exists in Claris FileMaker Server versions prior to 20.3.2 that stems from improper handling of parameters in the FileMaker WebDirect login...

6.1CVSS6.7AI score0.00308EPSS
SaveExploits0References2
Rows per page
Query Builder