Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Allen Disk
MEDIUM 6.5
CVE-2017-9307
SSRF vulnerability in remotedownload.php in Allen Disk 1.6 allows remote authenticated users to conduct port scans and access intranet servers via a …
Mitigation only
Fix from $1,600
2017-05-31
Allen Disk
MEDIUM 5.4
CVE-2017-9249
Cross-site scripting (XSS) vulnerability in Allen Disk 1.6 allows remote authenticated users to inject arbitrary web script or HTML persistently by u…
No fix yet
Fix from $1,600
2017-05-28
Allen Disk
HIGH 7.5
CVE-2017-9090
reg.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code'])==1, which makes it possible to bypass the CAPTCHA via an empty $_POST[…
Patch available
Fix from $1,950
2017-05-19
Allen Disk
HIGH 7.5
CVE-2017-9091
/admin/loginc.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code']) == 1, which leads to CAPTCHA bypass by emptying $_POST['capt…
Patch available
Fix from $1,950
2017-05-19
Allen Disk
MEDIUM 6.5
CVE-2017-8848
Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password.
Patch available
Fix from $1,600
2017-05-08
Allen Disk
MEDIUM 6.1
CVE-2017-8832
Allen Disk 1.6 has XSS in the id parameter to downfile.php.
Patch available
Fix from $1,600
2017-05-08