Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2009-4289

Malware in sbrugna...

5CVSS6.1AI score0.00819EPSS
Exploits1References9
OSV
OSV
added 2023/12/30 2:24 p.m.5 views

OPENSUSE-SU-2023:0421-1 Security update for proftpd

This update for proftpd fixes the following issues: Update to version 1.3.8a Implemented mitigations for 'Terrapin' SSH attack CVE-2023-48795. http://proftpd.org/docs/NEWS-1.3.8b...

5.9CVSS6.4AI score0.52998EPSS
Exploits4References2
OSV
OSV
added 2023/12/22 3:15 a.m.0 views

UBUNTU-CVE-2023-51713

makeftpcmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics...

7.5CVSS7.1AI score0.70298EPSS
Exploits1References5
CVE
CVE
added 2023/12/22 12:0 a.m.457 views

CVE-2023-51713

ProFTPD (make_ftp_cmd in main.c) is affected by CVE-2023-51713 in versions before 1.3.8a due to a one-byte out-of-bounds read caused by mishandling of quote/backslash semantics, leading to daemon crashes. Affected advisories reference ProFTPD before 1.3.8a across multiple vendors (Debian, Ubuntu,...

7.5CVSS7.3AI score0.70298EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2023/12/22 12:0 a.m.1 views

ProFTPd Security Vulnerability

ProFTPd is a highly configurable open source FTP server software. A security vulnerability exists in ProFTPd versions prior to 1.3.8a, which stems from improper handling of the semantics of the makeftpcmd function in the file main.c, resulting in an out-of-bounds read vulnerability and a daemon...

7.5CVSS6.7AI score0.70298EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/12/21 12:0 a.m.3 views

PT-2023-8972 · Proftpd +3 · Proftpd +3

Name of the Vulnerable Software and Affected Versions: ProFTPD versions prior to 1.3.8a Description: The issue is related to the make ftp cmd function in the main.c component of the ProFTPD FTP server, which mishandles quote and backslash semantics. This leads to a one-byte out-of-bounds read and...

7.8CVSS6.7AI score0.70298EPSS
Exploits5References40
Dsquare
Dsquare
added 2012/04/30 12:0 a.m.55 views

Zen Cart 1.3.8a File Upload

File upload vulnerability in Zen Cart Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

6.8CVSS0.3AI score0.35175EPSS
Exploits4References3
NVD
NVD
added 2009/06/30 10:30 a.m.12 views

CVE-2009-2255

Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/recordcompany.php, which allows remote attackers to execute arbitrary code by uploading a .php file via the recordcompanyimage parameter in conjunction with a PATHINFO of passwordforgotten.php, then...

6.8CVSS7.7AI score0.35175EPSS
Exploits4References7
Rows per page
Query Builder