Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
MEDIUM 6.5
CVE-2017-9307
SSRF vulnerability in remotedownload.php in Allen Disk 1.6 allows remote authenticated users to conduct port scans and access intranet servers via a …
Allen Disk
Mitigation only
MEDIUM 5.4
CVE-2017-9249
Cross-site scripting (XSS) vulnerability in Allen Disk 1.6 allows remote authenticated users to inject arbitrary web script or HTML persistently by u…
Allen Disk
No fix yet
HIGH 7.5
CVE-2017-9090
reg.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code'])==1, which makes it possible to bypass the CAPTCHA via an empty $_POST[…
Allen Disk
Patch available
HIGH 7.5
CVE-2017-9091
/admin/loginc.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code']) == 1, which leads to CAPTCHA bypass by emptying $_POST['capt…
Allen Disk
Patch available
MEDIUM 6.5
CVE-2017-8848
Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password.
Allen Disk
Patch available
MEDIUM 6.1
CVE-2017-8832
Allen Disk 1.6 has XSS in the id parameter to downfile.php.
Allen Disk
Patch available