Vulnerability index

Browse CVEs

12 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Kkfileview CRITICAL 9.8
CVE-2025-4538

A vulnerability was found in kkFileView 4.4.0. It has been classified as critical. This affects an unknown part of the file /fileUpload. The manipula…

Mitigation only
Fix from $2,300 2025-05-11
Kkfileview MEDIUM 6.1
CVE-2023-48815

kkFileView v4.3.0 is vulnerable to Incorrect Access Control.

No fix yet
Fix from $1,600 2023-12-04
Kkfileview MEDIUM 6.1
CVE-2022-46934

kkFileView v4.1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewController.j…

No fix yet
Fix from $1,600 2023-02-01
Kkfileview MEDIUM 6.1
CVE-2022-4740

A vulnerability, which was classified as problematic, has been found in kkFileView. Affected by this issue is the function setWatermarkAttribute of t…

No fix yet
Fix from $1,600 2022-12-25
Kkfileview HIGH 7.5
CVE-2022-43140

kkFileView v4.1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component cn.keking.web.controller.OnlinePreviewController#g…

No fix yet
Fix from $1,950 2022-11-17
Kkfileview MEDIUM 6.1
CVE-2022-42147

kkFileView 4.0 is vulnerable to Cross Site Scripting (XSS) via controller\ Filecontroller.java.

Mitigation only
Fix from $1,600 2022-10-17
Kkfileview CRITICAL 9.8
CVE-2022-42149

kkFileView 4.0 is vulnerable to Server-side request forgery (SSRF) via controller\OnlinePreviewController.java.

Mitigation only
Fix from $2,300 2022-10-17
Kkfileview MEDIUM 6.1
CVE-2022-40879

kkFileView v4.1.0 is vulnerable to Cross Site Scripting (XSS) via the parameter 'errorMsg.'

No fix yet
Fix from $1,600 2022-09-29
Kkfileview MEDIUM 6.5
CVE-2022-36593

kkFileView v4.0.0 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter at /controller/FileController.java.

No fix yet
Fix from $1,600 2022-09-02
Kkfileview MEDIUM 6.1
CVE-2022-35151

kkFileView v4.1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the urls and currentUrl parameters at /controller…

Patch available
Fix from $1,600 2022-08-17
Kkfileview MEDIUM 6.1
CVE-2022-29349

kkFileView v4.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewController.j…

No fix yet
Fix from $1,600 2022-05-25
Kkfileview HIGH 7.5
CVE-2021-43734EPSS 11%

kkFileview v4.0.0 has arbitrary file read through a directory traversal vulnerability which may lead to sensitive file leak on related host.

No fix yet
Fix from $1,950 2022-02-15