USN-6379-1: vsftpd vulnerability

It was discovered that vsftpd was vulnerable to the ALPACA TLS protocol content confusion attack. A remote attacker could possibly use this issue to redirect traffic from one subdomain to another...

CVE-2023-37878

Insecure default permissions in Wing FTP Server Admin Web Client allows for privilege escalation.This issue affects Wing FTP Server: = 7.2.0...

CVE-2023-37878

Insecure default permissions in Wing FTP Server Admin Web Client allows for privilege escalation.This issue affects Wing FTP Server: = 7.2.0...

CVE-2023-37879

Insecure storage of sensitive information in Wing FTP Server User Web Client allows information elicitation.This issue affects Wing FTP Server: = 7.2.0...

CVE-2023-37879

Insecure storage of sensitive information in Wing FTP Server User Web Client allows information elicitation.This issue affects Wing FTP Server: = 7.2.0...

CVE-2023-37881

Weak access control in Wing FTP Server Admin Web Client allows for privilege escalation.This issue affects Wing FTP Server: = 7.2.0...

CVE-2023-37881

Weak access control in Wing FTP Server Admin Web Client allows for privilege escalation.This issue affects Wing FTP Server: = 7.2.0...

CVE-2023-37875

Improper encoding or escaping of output in Wing FTP Server User Web Client allows Cross-Site Scripting XSS.This issue affects Wing FTP Server: = 7.2.0...

CVE-2023-37875

Improper encoding or escaping of output in Wing FTP Server User Web Client allows Cross-Site Scripting XSS.This issue affects Wing FTP Server: = 7.2.0...

Cross site scripting

Improper encoding or escaping of output in Wing FTP Server User Web Client allows Cross-Site Scripting XSS.This issue affects Wing FTP Server: = 7.2.0...

Information disclosure

Insecure storage of sensitive information in Wing FTP Server User Web Client allows information elicitation.This issue affects Wing FTP Server: = 7.2.0...

Design/Logic Flaw

Insecure default permissions in Wing FTP Server Admin Web Client allows for privilege escalation.This issue affects Wing FTP Server: = 7.2.0...

Design/Logic Flaw

Weak access control in Wing FTP Server Admin Web Client allows for privilege escalation.This issue affects Wing FTP Server: = 7.2.0...

CVE-2023-37875

CVE-2023-37875 affects Wing FTP Server ≤ 7.2.0 via the User Web Client, where improper encoding/escaping of output causes a Cross-Site Scripting (XSS) vulnerability. The issue is documented across multiple sources (NVD, CVE lists) with the root cause described as incorrect output encoding. Exploi...

CVE-2023-37875 Cross-Site Scripting Vulnerability in Wing FTP Server <= 7.2.0

Improper encoding or escaping of output in Wing FTP Server User Web Client allows Cross-Site Scripting XSS.This issue affects Wing FTP Server: = 7.2.0...

CVE-2023-37875 Cross-Site Scripting Vulnerability in Wing FTP Server <= 7.2.0

Improper encoding or escaping of output in Wing FTP Server User Web Client allows Cross-Site Scripting XSS.This issue affects Wing FTP Server: = 7.2.0...

CVE-2023-37878 Insecure Default Permissions in Wing FTP Server <= 7.2.0

Insecure default permissions in Wing FTP Server Admin Web Client allows for privilege escalation.This issue affects Wing FTP Server: = 7.2.0...

CVE-2023-37878 Insecure Default Permissions in Wing FTP Server <= 7.2.0

Insecure default permissions in Wing FTP Server Admin Web Client allows for privilege escalation.This issue affects Wing FTP Server: = 7.2.0...

CVE-2023-37878

CVE-2023-37878 describes an insecure default permission issue in the Wing FTP Server Admin Web Client that enables privilege escalation on Wing FTP Server versions

CVE-2023-37879 Exposed Session Variable in Wing FTP Server <= 7.2.0

Insecure storage of sensitive information in Wing FTP Server User Web Client allows information elicitation.This issue affects Wing FTP Server: = 7.2.0...