Lucene search
+L

16819 matches found

Prion
Prion
added 2020/02/10 4:15 p.m.12 views

Cross site request forgery (csrf)

A CSRF vulnerability exists in the Web File Manager's Network Setting functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can manipulate the SMTP setting and other network settings via RAPR/NetworkSettingsSet.html...

4.3CVSS6.5AI score0.00435EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2020/02/10 4:15 p.m.21 views

Cross site request forgery (csrf)

A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1. This allows an attacker to Create/Delete Folders after exploiting it at RAPR/FolderSetsSet.html...

5.8CVSS6.4AI score0.00435EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2020/02/10 4:15 p.m.17 views

Cross site request forgery (csrf)

A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can take over a user account by changing the password, update users' details, and escalate privileges via RAPR/DefineUsersSet.html...

6.8CVSS8.8AI score0.0049EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2020/02/10 4:15 p.m.17 views

Cross site request forgery (csrf)

A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnerability can result in manipulation of Server FTP settings at RAPR/FTPSettingsSet.html...

4.3CVSS6.5AI score0.00435EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/02/10 4:0 p.m.30 views

CVE-2019-19665

A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnerability can result in manipulation of Server FTP settings at RAPR/FTPSettingsSet.html...

6.5AI score0.00435EPSS
SaveExploits0References2
CVE
CVE
added 2020/02/10 4:0 p.m.56 views

CVE-2019-19665

A CSRF vulnerability exists in the FTP Settings component of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation can manipulate server FTP settings via RAPR/FTPSettingsSet.html. The CVE records consistently describe the flaw across multiple feeds (Red Hat, CNVD, CVE.org listings) but do not prov...

6.5CVSS6.5AI score0.00435EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/02/10 3:54 p.m.29 views

CVE-2019-19663

A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1. This allows an attacker to Create/Delete Folders after exploiting it at RAPR/FolderSetsSet.html...

6.4AI score0.00435EPSS
SaveExploits0References2
CVE
CVE
added 2020/02/10 3:54 p.m.55 views

CVE-2019-19663

CVE-2019-19663 concerns the Web File Manager’s Folder Sets Settings in Rumpus FTP 8.2.9.1. The issue is a Cross-Site Request Forgery (CSRF) vulnerability in the Folder Sets Settings page (RAPR/FolderSetsSet.html) that enables an attacker to create or delete folders. The affected product is Rumpus...

6.5CVSS6.4AI score0.00435EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/02/10 3:48 p.m.30 views

CVE-2019-19659

A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can take over a user account by changing the password, update users' details, and escalate privileges via RAPR/DefineUsersSet.html...

8.8AI score0.0049EPSS
SaveExploits0References2
CVE
CVE
added 2020/02/10 3:48 p.m.59 views

CVE-2019-19659

CVE-2019-19659 concerns a CSRF vulnerability in the Web File Manager’s Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. The issue allows an attacker to modify a user password and update user details, enabling privilege escalation via RAPR/DefineUsersSet.html. Documents consistently descr...

8.8CVSS8.7AI score0.0049EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/02/10 3:39 p.m.32 views

CVE-2019-19660

A CSRF vulnerability exists in the Web File Manager's Network Setting functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can manipulate the SMTP setting and other network settings via RAPR/NetworkSettingsSet.html...

6.5AI score0.00435EPSS
SaveExploits0References2
CVE
CVE
added 2020/02/10 3:39 p.m.58 views

CVE-2019-19660

The CVE-2019-19660 entry concerns a CSRF vulnerability in the Web File Manager’s Network Settings of Rumpus FTP Server 8.2.9.1 . The issue allows an attacker to manipulate settings such as the SMTP value and other network parameters via RAPR/NetworkSettingsSet.html . Affected component is the Web...

6.5CVSS6.5AI score0.00435EPSS
SaveExploits0References2Affected Software1
FreeBSD
FreeBSD
added 2020/02/10 12:0 a.m.43 views

Squid -- multiple vulnerabilities

The Squid developers reports: Improper Input Validation issues in HTTP Request processing CVE-2020-8449, CVE-2020-8450. Information Disclosure issue in FTP Gateway CVE-2019-12528. Buffer Overflow issue in extlmgroupacl helper CVE-2020-8517...

7.5CVSS1.4AI score0.7179EPSS
SaveExploits0References5
Fedora
Fedora
added 2020/02/08 2:3 a.m.62 views

[SECURITY] Fedora 31 Update: pure-ftpd-1.0.49-3.fc31

Pure-FTPd is a fast, production-quality, standard-comformant FTP server, based upon Troll-FTPd. Unlike other popular FTP servers, it has no known security flaw, it is really trivial to set up and it is especially designed for modern Linux and FreeBSD kernels setfsuid, sendfile, capabilities...

7.5CVSS0.5AI score0.04365EPSS
SaveExploits0
Fedora
Fedora
added 2020/02/08 1:39 a.m.36 views

[SECURITY] Fedora 30 Update: pure-ftpd-1.0.49-3.fc30

Pure-FTPd is a fast, production-quality, standard-comformant FTP server, based upon Troll-FTPd. Unlike other popular FTP servers, it has no known security flaw, it is really trivial to set up and it is especially designed for modern Linux and FreeBSD kernels setfsuid, sendfile, capabilities...

7.5CVSS0.5AI score0.04365EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2020/02/08 12:0 a.m.28 views

Fedora: Security Advisory for pure-ftpd (FEDORA-2020-85fa9f07f4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.04365EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/02/08 12:0 a.m.22 views

Fedora: Security Advisory for pure-ftpd (FEDORA-2020-74b71e5873)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.04365EPSS
SaveExploits0References2
NVD
NVD
added 2020/02/04 9:15 p.m.21 views

CVE-2019-12528

An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions or non-Squid processes...

7.5CVSS8.2AI score0.10493EPSS
SaveExploits0References10
OSV
OSV
added 2020/02/04 9:15 p.m.28 views

CVE-2019-12528

An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions or non-Squid processes...

7.5CVSS6.1AI score
SaveExploits0References10
UbuntuCve
UbuntuCve
added 2020/02/04 9:15 p.m.28 views

CVE-2019-12528

An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions or non-Squid processes...

7.5CVSS6.6AI score0.10493EPSS
SaveExploits0References3
Rows per page
Query Builder