LiquidFiles kayıtları
liquidfiles üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %12,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-24 Path Traversal: '../filedir'1
- CWE-305 Authentication Bypass by Primary Weakness1
- CWE-116 Improper Encoding or Escaping of Output1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
- CWE-829 Inclusion of Functionality from Untrusted Control Sphere1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2021-43397İstismar yok | LiquidFiles before 3.6.3 allows remote attackers to elevate their privileges from Admin (or User Admin) to Sysadmin.liquidfiles · liquidfiles · CWE-522 | Yüksek8,8 | — | %3,8 | 11 Kas 2021 |
36İzleyin | CVE-2020-29071İstismar yok | An XSS issue was found in the Shares feature of LiquidFiles before 3.3.19.liquidfiles · liquidfiles · CWE-79 | Kritik9,0 | — | %1,7 | 24 Kas 2020 |
35İzleyin | CVE-2025-46093İstismar yok | LiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 (setuid and setgid), which allows FTPDrop users to execute arbitrary code as liquidfiles · liquidfiles · CWE-732 | Yüksek8,8 | — | %0,5 | 4 Ağu 2025 |
29İzleyin | CVE-2025-56132Kavram kanıtı | LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality.liquidfiles · liquidfiles · CWE-305 | Yüksek7,3 | — | %0,7 | 30 Eyl 2025 |
24İzleyin | CVE-2020-29072İstismar yok | A Cross-Site Script Inclusion vulnerability was found on LiquidFiles before 3.3.19.liquidfiles · liquidfiles · CWE-829 | Orta6,1 | — | %0,7 | 24 Kas 2020 |
24İzleyin | CVE-2023-4393İstismar yok | HTML and SMTP Injection in LiquidFilesliquidfiles · liquidfiles · CWE-116 | Orta6,1 | — | %0,3 | 29 Eki 2023 |
21İzleyin | CVE-2021-30140İstismar yok | LiquidFiles 3.4.15 has stored XSS through the "send email" functionality when sending a file via email to an administrator.liquidfiles · liquidfiles · CWE-79 | Orta5,4 | — | %1,4 | 6 Nis 2021 |
15İzleyin | CVE-2025-46094İstismar yok | LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript.liquidfiles · liquidfiles · CWE-24 | Düşük3,8 | — | %0,5 | 4 Ağu 2025 |
- CVE-2021-4339736İzleyin
LiquidFiles before 3.6.3 allows remote attackers to elevate their privileges from Admin (or User Admin) to Sysadmin.
YüksekCVSS 8,8İstismar yokEPSS %4liquidfiles · liquidfiles11 Kas 2021
- CVE-2020-2907136İzleyin
An XSS issue was found in the Shares feature of LiquidFiles before 3.3.19.
KritikCVSS 9,0İstismar yokEPSS %2liquidfiles · liquidfiles24 Kas 2020
- CVE-2025-4609335İzleyin
LiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 (setuid and setgid), which allows FTPDrop users to execute arbitrary code as
YüksekCVSS 8,8İstismar yokEPSS %1liquidfiles · liquidfiles4 Ağu 2025
- CVE-2025-5613229İzleyin
LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality.
YüksekCVSS 7,3Kavram kanıtıEPSS %1liquidfiles · liquidfiles30 Eyl 2025
- CVE-2020-2907224İzleyin
A Cross-Site Script Inclusion vulnerability was found on LiquidFiles before 3.3.19.
OrtaCVSS 6,1İstismar yokEPSS %1liquidfiles · liquidfiles24 Kas 2020
- CVE-2023-439324İzleyin
HTML and SMTP Injection in LiquidFiles
OrtaCVSS 6,1İstismar yokEPSS %0liquidfiles · liquidfiles29 Eki 2023
- CVE-2021-3014021İzleyin
LiquidFiles 3.4.15 has stored XSS through the "send email" functionality when sending a file via email to an administrator.
OrtaCVSS 5,4İstismar yokEPSS %1liquidfiles · liquidfiles6 Nis 2021
- CVE-2025-4609415İzleyin
LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript.
DüşükCVSS 3,8İstismar yokEPSS %1liquidfiles · liquidfiles4 Ağu 2025