Skip to contentPydio Pydio vulnerabilities
- pydioPydio Core <= 8.2.5 is vulnerable to Cross Site Scripting (XSS) via the New URL Bookmark feature.CVE-2024-401245.4 Medium
- pydioA problem was found in Pydio Core before 8.2.4 and Pydio Enterprise before 8.2.4. A PHP object...CVE-2019-204538.8 High
- pydioA problem was found in Pydio Core before 8.2.4 and Pydio Enterprise before 8.2.4. A PHP object...CVE-2019-204528.8 High
- pydioAjaxeplorer before 5.0.1 allows remote attackers to execute arbitrary commands via shell...CVE-2013-42679.8 Critical
- pydioPydio 6.0.8 allows Authenticated SSRF during a Remote Link Feature download. An attacker can...CVE-2019-150337.7 High
- pydioPydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the...CVE-2019-150325.3 Medium
- pydioAn issue was discovered in proxy.php in pydio-core in Pydio through 8.2.2. Through an...CVE-2019-96429.8 Critical
- pydioIt is possible for an attacker with regular user access to the web application of Pydio through 8...CVE-2019-100497.3 High
- pydioThe ImageMagick plugin that is installed by default in Pydio through 8.2.2 does not perform the...CVE-2019-100487.2 High
- pydioPyDio Stored XSS VulnerabilityCVE-2019-100475.4 Medium
- pydioAn unauthenticated attacker can obtain information about the Pydio 8.2.2 configuration including...CVE-2019-100465.3 Medium
- pydioThe "action" get_sess_id in the web application of Pydio through 8.2.2 discloses the session...CVE-2019-100456.5 Medium
- pydioIn Pydio before 8.2.2, an attack is possible via PHP Object Injection because a user is allowed...CVE-2018-20718Public exploit9.8 Critical
- pydioPydio 4.2.1 through 8.2.1 has an authenticated remote code execution vulnerability in which an...CVE-2018-14772Public exploit7.2 High
- pydioPydio version 8.2.1 and prior contains an Unvalidated user input leading to Remote Code Execution...CVE-2018-19990186.6 Medium
- pydioPydio version 8.2.0 and earlier contains a Server-Side Request Forgery (SSRF) vulnerability in...CVE-2018-19990174.9 Medium
- pydioPydio version 8.2.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in ./core...CVE-2018-19990166.1 Medium
- pydioMultiple cross-site scripting (XSS) vulnerabilities in Pydio (formerly AjaXplorer) before 6.0.7...CVE-2015-34326.1 Medium
- pydioPydio (formerly AjaXplorer) before 6.0.7 allows remote attackers to execute arbitrary commands...CVE-2015-34319.8 Critical
- ajaxplorer, pydio +1 moreUnrestricted file upload vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho...CVE-2013-6227Public exploit7.5 High