CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 24/02/2022 |
| CVE-2022-25242 | HOCH8.8 | In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF). | 16/02/2022 |
| CVE-2022-25241 | HOCH8.8 | In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF). | 16/02/2022 |
| CVE-2020-26524 | MITTEL5.3 | CodeLathe FileCloud before 20.2.0.11915 allows username enumeration. | 02/10/2020 |
| CVE-2016-6578 | HOCH8.8 | CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global cross-site request forgery (CSRF) vulnerability. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request. | 13/07/2018 |