LI
Vendor
liquidfiles
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-12673 | LI liquidfiles liquidfiles | 5.9 | Jun 20 | Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalation from an Admin in a secondary domain to a Sysadmin by… |
| CVE-2025-56132 | LI Liquidfiles Liquidfiles | 7.3 | Sep 30 | LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality |
| CVE-2025-46093 | LI LiquidFiles LiquidFiles | 8.8 | Aug 4 | LiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 (setuid and setgid), which allows FTPDrop users to execute arbitrary code as root by leveraging the Actionscript… |
| CVE-2025-46094 | LI LiquidFiles LiquidFiles | 3.8 | Aug 4 | LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript |
| CVE-2023-4393 | LI Liquidfiles Liquidfiles | 6.1 | Oct 29 | HTML and SMTP Injection in LiquidFiles |
| CVE-2021-43397 | LI Liquidfiles Liquidfiles | 8.8 | Nov 11 | LiquidFiles before 3.6.3 allows remote attackers to elevate their privileges from Admin (or User Admin) to Sysadmin |
| CVE-2021-30140 | LI Liquidfiles Liquidfiles | 5.4 | Apr 6 | LiquidFiles 3.4.15 has stored XSS through the "send email" functionality when sending a file via email to an administrator |
| CVE-2020-29072 | LI Liquidfiles Liquidfiles | 6.1 | Nov 25 | A Cross-Site Script Inclusion vulnerability was found on LiquidFiles before 3.3.19 |
| CVE-2020-29071 | LI Liquidfiles Liquidfiles | 9.0 | Nov 25 | An XSS issue was found in the Shares feature of LiquidFiles before 3.3.19 |