CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 24/02/2022 |
| CVE-2022-25242 | 高危8.8 | In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF). | 16/02/2022 |
| CVE-2022-25241 | 高危8.8 | In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF). | 16/02/2022 |
| CVE-2020-26524 | 中危5.3 | CodeLathe FileCloud before 20.2.0.11915 allows username enumeration. | 02/10/2020 |
| CVE-2016-6578 | 高危8.8 | CodeLathe FileCloud, version 13.0.0.32841 and earlier, contains a global cross-site request forgery (CSRF) vulnerability. An attacker can perform actions with the same permissions as a victim user, provided the victim has an active session and is induced to trigger the malicious request. | 13/07/2018 |