CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Today 6 Last 7 days 2,636 Total CVEs 401,246 CISA KEV 1,733 Critical 42,400 All stats

Page 1

CVE-2022-39833 HIGH

FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API endpoints via a cr…

CVSS 7.2 EPSS 2.83% Nov 23, 2022

CVE-2022-1958 MEDIUM

FileCloud NTFS access control

CVSS 6.5 EPSS 0.73% Jun 15, 2022

CVE-2022-24633 MEDIUM

All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter "path" passing "/SHARED/<username>". A ma…

CVSS 5.3 EPSS 0.81% Feb 22, 2022

CVE-2022-25241 HIGH

In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF).

CVSS 8.8 EPSS 3.27% Feb 16, 2022

CVE-2022-25242 HIGH

In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF).

CVSS 8.8 EPSS 0.39% Feb 16, 2022

CVE-2020-26524 MEDIUM

CodeLathe FileCloud before 20.2.0.11915 allows username enumeration.

CVSS 5.3 EPSS 1.44% Oct 2, 2020

CVE-2016-6578 HIGH

CodeLathe FileCloud, version 13.0.0.32841 and earlier, is vulnerable to cross-site request forgery (CSRF)

CVSS 8.8 EPSS 0.86% Jul 13, 2018

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2022-39833	FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API endpoints via a cr…	HIGH	7.2	2.83%	Nov 23, 2022
CVE-2022-1958	FileCloud NTFS access control	MEDIUM	6.5	0.73%	Jun 15, 2022
CVE-2022-24633	All versions of FileCloud prior to 21.3 are vulnerable to user enumeration. The vulnerability exists in the parameter "path" passing "/SHARED/<username>". A ma…	MEDIUM	5.3	0.81%	Feb 22, 2022
CVE-2022-25241	In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF).	HIGH	8.8	3.27%	Feb 16, 2022
CVE-2022-25242	In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF).	HIGH	8.8	0.39%	Feb 16, 2022
CVE-2020-26524	CodeLathe FileCloud before 20.2.0.11915 allows username enumeration.	MEDIUM	5.3	1.44%	Oct 2, 2020
CVE-2016-6578	CodeLathe FileCloud, version 13.0.0.32841 and earlier, is vulnerable to cross-site request forgery (CSRF)	HIGH	8.8	0.86%	Jul 13, 2018

Rows per page

Showing 1 to 7 CVEs · page 1