Lucene search
K

49 matches found

Circl
Circl
added 2026/05/06 1:28 p.m.3 views

CVE-1999-0497

creationtimestamp| type| source ---|---|--- 2026-05-06 13:28:27+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ftp/ftpanonymous.rb...

5.7AI score0.34725EPSS
Exploits1References1
NVD
NVD
added 2026/03/22 2:16 p.m.1 views

CVE-2019-25614

Free Float FTP 1.0 contains a buffer overflow vulnerability in the STOR command handler that allows remote attackers to execute arbitrary code by sending a crafted STOR request with an oversized payload. Attackers can authenticate with anonymous credentials and send a malicious STOR command...

9.8CVSS0.00858EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/03/22 1:38 p.m.0 views

CVE-2019-25614 Free Float FTP 1.0 STOR Command Remote Buffer Overflow

Free Float FTP 1.0 contains a buffer overflow vulnerability in the STOR command handler that allows remote attackers to execute arbitrary code by sending a crafted STOR request with an oversized payload. Attackers can authenticate with anonymous credentials and send a malicious STOR command...

9.8CVSS6.9AI score0.00858EPSS
Exploits1References3
CVE
CVE
added 2026/03/22 1:38 p.m.4 views

CVE-2019-25614

Free Float FTP 1.0 has a remote buffer overflow in the STOR command handler that allows code execution via a crafted oversized STOR payload. An attacker can authenticate with anonymous credentials and send 247 bytes of padding followed by a return address and shellcode to trigger execution on the...

9.8CVSS6.9AI score0.00858EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2026/03/22 1:38 p.m.26 views

CVE-2019-25614 Free Float FTP 1.0 STOR Command Remote Buffer Overflow

Free Float FTP 1.0 contains a buffer overflow vulnerability in the STOR command handler that allows remote attackers to execute arbitrary code by sending a crafted STOR request with an oversized payload. Attackers can authenticate with anonymous credentials and send a malicious STOR command...

9.8CVSS0.00858EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:0 a.m.3 views

MiracleLinux 3 : dbmail-2.2.5-1.8AXS3 (AXSA:2008-85:01)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2008-85:01 advisory. Description of problem: Dbmail is the name of a group of programs that enable the possibility of storing and retrieving mail messages from a database. DBMail...

6.8CVSS5.6AI score0.01634EPSS
Exploits1References2
OSV
OSV
added 2025/10/09 5:15 p.m.0 views

CVE-2025-59980

An Authentication Bypass by Primary Weakness in the FTP server of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to get limited read-write access to files on the device. When the FTP server is enabled and a user named "ftp" or "anonymous" is configured, that user can...

6.9CVSS5.8AI score0.00045EPSS
Exploits0References1
CVE
CVE
added 2025/10/09 4:5 p.m.8 views

CVE-2025-59980

Summary of CVE-2025-59980 : Juniper Networks Junos OS FTP server contains an authentication bypass. When the FTP server is enabled and a user named “ftp” or “anonymous” exists, an unauthenticated attacker can log in without a password and gain read/write access to the user’s home directory. Affec...

6.9CVSS6.7AI score0.00045EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/10/09 4:5 p.m.3 views

CVE-2025-59980 Junos OS: When a user with the name ftp or anonymous is configured unauthenticated filesystem access is allowed

An Authentication Bypass by Primary Weakness in the FTP server of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to get limited read-write access to files on the device. When the FTP server is enabled and a user named "ftp" or "anonymous" is configured, that user can...

6.9CVSS0.00045EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-1504

Malware in sbrugna...

6.5CVSS6.4AI score0.00218EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2024-2134

Malicious code in bioql PyPI...

9.8CVSS9AI score0.00592EPSS
Exploits0References6
Veracode
Veracode
added 2024/06/14 5:19 a.m.14 views

Arbitrary File Read/Write

github.com/projectdiscovery/interactsh is vulnerable to Arbitrary File Read/Write. The vulnerability is due to improper smb server restrictions which allows an attacker to read/write any files in the directory and subdirectories of where the victim runs interactsh-server via anonymous login...

9.8CVSS7AI score0.00592EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2024/06/06 7:15 p.m.1 views

CVE-2024-22326

IBM System Storage DS8900F 89.22.19.0, 89.30.68.0, 89.32.40.0, 89.33.48.0, 89.40.83.0, and 89.40.93.0 could allow a remote user to create an LDAP connection with a valid username and empty password to establish an anonymous connection. IBM X-Force ID: 279518...

6.3CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2024/06/05 6:30 a.m.11 views

GHSA-Q5MG-PC7R-R8CR Files or Directories Accessible to External Parties in ProjectDiscovery

Files or Directories Accessible to External Parties vulnerability in smb server in ProjectDiscovery Interactsh allows remote attackers to read/write any files in the directory and subdirectories of where the victim runs interactsh-server via anonymous login...

9.8CVSS9.4AI score0.00592EPSS
Exploits0References6
NVD
NVD
added 2024/06/05 4:15 a.m.18 views

CVE-2024-5262

Files or Directories Accessible to External Parties vulnerability in smb server in ProjectDiscovery Interactsh allows remote attackers to read/write any files in the directory and subdirectories of where the victim runs interactsh-server via anonymous login...

9.8CVSS6.7AI score0.00592EPSS
Exploits0References2
OSV
OSV
added 2024/06/05 4:15 a.m.13 views

CVE-2024-5262

Files or Directories Accessible to External Parties vulnerability in smb server in ProjectDiscovery Interactsh allows remote attackers to read/write any files in the directory and subdirectories of where the victim runs interactsh-server via anonymous login...

9.8CVSS9.4AI score
Exploits0References2
Cvelist
Cvelist
added 2024/06/05 4:0 a.m.18 views

CVE-2024-5262 ProjectDiscovery Interactsh - Files or Directories Accessible to External Parties

Files or Directories Accessible to External Parties vulnerability in smb server in ProjectDiscovery Interactsh allows remote attackers to read/write any files in the directory and subdirectories of where the victim runs interactsh-server via anonymous login...

9.3CVSS6.6AI score0.00592EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/03/13 12:0 a.m.3 views

PT-2024-2196 · Unknown · Filecatalyst Workflow

Name of the Vulnerable Software and Affected Versions: FileCatalyst Workflow versions prior to 5.1.6 Build 114 Description: A directory traversal vulnerability within the ‘ftpservlet’ of the FileCatalyst Workflow Web Portal allows files to be uploaded outside of the intended ‘uploadtemp’ director...

10CVSS8.2AI score0.82216EPSS
Exploits4References46
Hacker One
Hacker One
added 2023/07/24 7:27 a.m.190 views

U.S. Dept Of Defense: LDAP Anonymous Login enabled in ████

LDAP Anonymous Login was enabled in ██████████, allowing unauthorized users to connect to the LDAP server without providing any authentication credentials. This could lead to unauthorized access and retrieval of sensitive information stored in the LDAP directory...

6.7AI score
Exploits0
CNNVD
CNNVD
added 2022/12/12 12:0 a.m.2 views

HCL Technologies HCL Sametime 安全漏洞

HCL Technologies HCL Sametime is a conferencing solution from HCL Technologies, USA. A security vulnerability exists in HCL Technologies HCL Sametime 12 that stems from an anonymous user logging in and being able to browse the user directory and potentially create chats with internal users...

6.5CVSS6.5AI score0.00236EPSS
Exploits0References2
Rows per page
Query Builder