3 results (0.002 seconds)

CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 1

CVE-2020-23038

https://notcve.org/view.php?id=CVE-2020-23038

22 Oct 2021 — Swift File Transfer Mobile v1.1.2 and below was discovered to contain an information disclosure vulnerability in the path parameter. This vulnerability is exploited via an error caused by including non-existent path environment variables. Se ha detectado que Swift File Transfer Mobile versiones v1.1.2 y por debajo, contienen una vulnerabilidad de divulgación de información en el parámetro path. Esta vulnerabilidad es explotada por medio de un error causado por la inclusión de variables de entorno de ruta no... • https://www.vulnerability-lab.com/get_content.php?id=2205 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 6.1EPSS: 0%CPEs: 4EXPL: 1

CVE-2020-36486

https://notcve.org/view.php?id=CVE-2020-36486

22 Oct 2021 — Swift File Transfer Mobile v1.1.2 and below was discovered to contain a cross-site scripting (XSS) vulnerability via the 'path' parameter of the 'list' and 'download' exception-handling. Se ha detectado que Swift File Transfer Mobile versión v1.1.2 y por debajo, contienen una vulnerabilidad de tipo cross-site scripting (XSS) por medio del parámetro "path" del manejo de excepciones "list" y "download" • https://www.vulnerability-lab.com/get_content.php?id=2205 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2020-36502

https://notcve.org/view.php?id=CVE-2020-36502

22 Oct 2021 — Swift File Transfer Mobile v1.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the devicename parameter which allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered as the device name itself. Se ha detectado que Swift File Transfer Mobile versión v1.1.2, contiene una vulnerabilidad de tipo cross-site scripting (XSS) por medio del parámetro devicename que permite a atacantes ejecutar scripts web o HTML arbitrarios por medio de una carga útil diseña... • https://www.vulnerability-lab.com/get_content.php?id=2205 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •