1204 matches found
The vulnerability of the Thunderbird email client, as well as the Firefox and Firefox ESR browsers, relates to errors in processing new line symbols in FTP URLs. This vulnerability allows attackers to send arbitrary commands to the FTP server.
The vulnerability of the Thunderbird email client, as well as browsers Firefox and Firefox ESR, is related to errors in processing new line characters in FTP URL addresses such as %0A or %0D. Exploiting this vulnerability allows a remote attacker to send arbitrary commands to the FTP server...
The vulnerability of the programmable logic controller Schneider Electric Modicon Quantum, related to the insufficient reliability of passwords, allows a intruder to alter the contents of configuration files.
The vulnerability of the programmable logic controller Schneider Electric Modicon Quantum is related to the insufficient security of passwords. Exploiting this vulnerability could allow an attacker to modify the contents of configuration files using the built-in FTP server passwords...
Mozilla: Arbitrary FTP command execution on FTP servers using an encoded URL
When a user clicked on an FTP URL containing encoded newline characters %0A and %0D, the newlines would have been interpreted as such and allowed arbitrary commands to be sent to the FTP server. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...
Mozilla: Arbitrary FTP command execution on FTP servers using an encoded URL
When a user clicked on an FTP URL containing encoded newline characters %0A and %0D, the newlines would have been interpreted as such and allowed arbitrary commands to be sent to the FTP server. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...
Mozilla: Arbitrary FTP command execution on FTP servers using an encoded URL
When a user clicked on an FTP URL containing encoded newline characters %0A and %0D, the newlines would have been interpreted as such and allowed arbitrary commands to be sent to the FTP server. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...
Mozilla: Arbitrary FTP command execution on FTP servers using an encoded URL
When a user clicked on an FTP URL containing encoded newline characters %0A and %0D, the newlines would have been interpreted as such and allowed arbitrary commands to be sent to the FTP server. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...
Mozilla: Arbitrary FTP command execution on FTP servers using an encoded URL
When a user clicked on an FTP URL containing encoded newline characters %0A and %0D, the newlines would have been interpreted as such and allowed arbitrary commands to be sent to the FTP server. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...
Mozilla: Arbitrary FTP command execution on FTP servers using an encoded URL
When a user clicked on an FTP URL containing encoded newline characters %0A and %0D, the newlines would have been interpreted as such and allowed arbitrary commands to be sent to the FTP server. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...
The vulnerability of the update function in FlexConnect microprogramming software for Cisco Aironet Access Points allows a intruder to disclose protected information.
The vulnerability of the update function in FlexConnect microprogramming software for Cisco Aironet Access Points is related to improper handling of permissions. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information by sending TFTP requests to the vulnerable...
Haxx libcurl 信息泄露漏洞
HAXX Haxx libcurl is a free, open source client-side URL transport library from the Swedish company HAXX. The library supports FTP, FTPS, TFTP, HTTP and more. An information disclosure vulnerability exists in Haxx libcurl, which can be exploited by an attacker to bypass access restrictions on dat...
Cisco Aironet Series Access Points Software 安全漏洞
Cisco Aironet Series Access Points Software is a suite of software from Cisco that is used in Aironet wireless access point devices. A security vulnerability exists in the Cisco Aironet Series Access Points Software, which arises from an unrestricted TFTP configuration, and can be exploited by an...
CVE-2021-27221
MikroTik RouterOS 6.47.9 allows remote authenticated ftp users to create or overwrite arbitrary .rsc files via the /export command. NOTE: the vendor's position is that this is intended behavior because of how user policies work...
Netgear NETGEAR JGS516PE 资源管理错误漏洞
The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. A denial of service vulnerability exists in the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. The vulnerability stems from the TFTP server not being able to handle multiple connections. An attacker could exploit the...
The vulnerability of the FTP protocol implementation on the StarOS operating system on Cisco ASR 5000 routers allows a hacker to gain unauthorized access to protected information.
The vulnerability of the FTP SFTP protocol implementation on the StarOS operating system of Cisco ASR 5000 routers is related to errors in link processing. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information from a remote location...
Teamamaze Amazefilemanager Security Vulnerability
Teamamaze Amazefilemanager is a file manager application from Teamamaze team for Android devices. A security vulnerability exists in the Teamamaze Amazefilemanager application prior to version 3.4.2, which stems from an intent to control an FTP server that is not properly restricted...
CVE-2020-24578
An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU2.31V1.1.47ae55. It has a misconfigured FTP service that allows a malicious network user to access system folders and download sensitive files such as the password hash file...
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing.
...
DEBIAN-CVE-2020-8284
A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service...
ALPINE-CVE-2020-8284
A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service...