Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: yoran_brault'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2026-34530 6.9 File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to version 2.62.2, the SPA index page in File Browser is vulnerable to Stored Cross-Site Scripting (XSS) vi 2026-04-06 20:34:21
CVE-2026-32761 6.5 File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Versions 2.61.0 and below contain a permission enforcement bypass which allows users who are denied download priv 2026-03-23 16:56:04
CVE-2026-32758 6.5 File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Versions 2.61.2 and below are vulnerable to Path Traversal through the resourcePatchHandler (http/resource.go). T 2026-03-23 16:55:20
CVE-2026-32760 9.8 File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. In versions 2.61.2 and below, any unauthenticated visitor can register a full administrator account when self-reg 2026-03-23 16:54:48
CVE-2026-30933 7.5 FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-beta and 1.2.2-stable, the remediation for CVE-2026-27611 is incomplete. Password protected shares still disclose tokenized downloadURL via /public/api/share/info. Thi 2026-03-18 17:13:34
CVE-2026-30934 8.9 FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-beta and 1.2.2-stable, Stored XSS is possible via share metadata fields (e.g., title, description) that are rendered into HTML for /public/share/<hash> without context 2026-03-18 16:52:51
CVE-2026-29188 9.1 File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to version 2.61.1, a broken access control vulnerability in the TUS protocol DELETE endpoint allo 2026-03-10 19:42:36
CVE-2026-28492 6.5 File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to version 2.61.0, when a user creates a public share link for a directory, the withHashFile midd 2026-03-10 19:34:55
CVE-2026-25889 5.4 File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, a case-sensitivity flaw in the password validation logic allows any authenticated user 2026-02-23 17:55:17
CVE-2026-25890 8.1 File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, an authenticated user can bypass the application's "Disallow" file path rules by modif 2026-02-20 20:31:02
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/4
Zapisa po stranici: