Lucene search
+L

4488 matches found

RedHat Linux
RedHat Linux
•added 2024/01/25 8:12 a.m.•11 views

curl: FTP too eager connection reuse

A flaw was found in the Curl package. Libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, several FTP settings were left out from the configuration match checks, making them match too easily. The problematic...

5.9CVSS6.8AI score0.01607EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/01/25 12:00 a.m.•17 views

PT-2024-15894 · Kmint21 · Kmint21 Golden Ftp Server

Name of the Vulnerable Software and Affected Versions: Kmint21 Golden FTP Server version 2.02b Description: A vulnerability was found in the PASV Command Handler component, which can lead to denial of service when manipulated. The attack can be initiated remotely. Recommendations: For Kmint21...

7.5CVSS7.1AI score0.01371EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2024/01/25 12:00 a.m.•18 views

Golden FTP Server Security Vulnerability

Golden FTP Server is an FTP service. A security vulnerability exists in Golden FTP Server version 2.02b. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

7.5CVSS6.5AI score0.01371EPSS
SaveExploits1References4
VulnCheck KEV
VulnCheck KEV
•added 2024/01/25 12:00 a.m.•12 views

VulnCheck KEV: CVE-2024-0204

Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal...

9.8CVSS8.4AI score0.95086EPSS
SaveIn wildExploits9References828
GithubExploit
GithubExploit
•added 2024/01/23 10:42 p.m.•99 views

Exploit for Forced Browsing in Fortra Goanywhere_Managed_File_Transfer

It is an exploit module targeting the GoAnywhere MFT vulnerabili...

9.8CVSS9.1AI score0.95086EPSS
SaveExploits9
Tenable Nessus
Tenable Nessus
•added 2024/01/23 12:00 a.m.•41 views

Fortra GoAnywhere Managed File Transfer (MFT) < 7.4.1 Authentication Bypass (CVE-2024-0204)

Binary data fortragoanywheremftCVE-2024-0204.nbin...

9.8CVSS8.5AI score0.95086EPSS
SaveExploits9References2
BDU FSTEC
BDU FSTEC
•added 2024/01/22 12:00 a.m.•20 views

The vulnerability of the TFTP Server component of the Korenix microprogramming software for switches allows a hacker to circumvent existing security restrictions.

The vulnerability of the TFTP Server component of the Korenix microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions from a remote location...

9.4CVSS7.8AI score0.01414EPSS
SaveExploits3References5Affected Software40
CNNVD
CNNVD
•added 2024/01/19 12:00 a.m.•19 views

EFS Easy File Sharing FTP Security Vulnerability

EFS Software EFS Easy File Sharing FTP is an easy-to-use and powerful FTP Server software from EFS Software. A security vulnerability exists in EFS Easy File Sharing FTP version 3.6, which stems from a denial of service caused by the password parameter of the component Login...

7.5CVSS6.9AI score0.00985EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/01/18 12:00 a.m.•16 views

PT-2024-15754 · Unknown · Efs Easy File Sharing Ftp

Name of the Vulnerable Software and Affected Versions: EFS Easy File Sharing FTP version 2.0 Description: A problematic vulnerability was found in the software, affecting an unknown functionality. The manipulation of the username argument leads to denial of service. The attack can be launched...

7.5CVSS7AI score0.01303EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2024/01/15 12:00 a.m.•19 views

FreeFloat FTP Server Security Vulnerability

FreeFloat FTP Server is an FTP service. A security vulnerability exists in FreeFloat FTP Server version 1.0 that stems from a denial of service DOS vulnerability in the SIZE Command Handler component...

7.5CVSS6.7AI score0.01344EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/01/14 12:00 a.m.•21 views

PT-2024-15647 · Unknown · Ability Ftp Server

Name of the Vulnerable Software and Affected Versions: Ability FTP Server version 2.34 Description: A vulnerability has been found in the APPE Command Handler component, which can be exploited to cause a denial of service. The attack can be launched remotely. The exploit has been disclosed to the...

7.5CVSS7.2AI score0.01354EPSS
SaveExploits1References8
Fedora
Fedora
•added 2024/01/10 1:52 a.m.•43 views

[SECURITY] Fedora 38 Update: libssh-0.10.6-2.fc38

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, trans fer files, use a secure and transparent tunnel for your remote...

5.9CVSS6.6AI score0.93547EPSS
SaveExploits4
OSV
OSV
•added 2024/01/09 10:15 a.m.•16 views

CVE-2023-5376

An Improper Authentication vulnerability in Korenix JetNet TFTP allows abuse of this service. This issue affects JetNet devices older than firmware version 2024/01...

9.1CVSS7.3AI score0.01414EPSS
SaveExploits3References4
CNNVD
CNNVD
•added 2024/01/09 12:00 a.m.•32 views

Korenix JetNet Security Vulnerability

Korenix JetNet is an industrial 5-port 10 / 100Base-TX Ethernet switch from Korenix. A security vulnerability exists in Korenix JetNet firmware versions prior to 2024/01, which stems from incorrect authentication in TFTP, allowing users to upload and download files to the /home folder...

9.1CVSS7.1AI score0.01414EPSS
SaveExploits3References5
Positive Technologies
Positive Technologies
•added 2024/01/09 12:00 a.m.•12 views

PT-2024-1168

Name of the Vulnerable Software and Affected Versions Korenix JetNet devices versions prior to 2024/01 Description The issue is related to an Improper Authentication vulnerability in the TFTP Server component of Korenix JetNet devices. This vulnerability can be exploited by a remote attacker to...

9.1CVSS9.2AI score0.01414EPSS
SaveExploits3References20
OSV
OSV
•added 2024/01/08 3:15 a.m.•19 views

CVE-2023-47140

IBM CICS Transaction Gateway 9.3 could allow a user to transfer or view files due to improper access controls...

8.1CVSS5.8AI score0.0022EPSS
SaveExploits0References3
NVD
NVD
•added 2024/01/08 3:15 a.m.•31 views

CVE-2023-47140

IBM CICS Transaction Gateway 9.3 could allow a user to transfer or view files due to improper access controls...

8.1CVSS5.8AI score0.0022EPSS
SaveExploits0References3
Prion
Prion
•added 2024/01/08 3:15 a.m.•29 views

Improper access control

IBM CICS Transaction Gateway 9.3 could allow a user to transfer or view files due to improper access controls. IBM X-Force ID: 270259...

5.5CVSS6.6AI score0.0022EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2024/01/08 2:08 a.m.•74 views

CVE-2023-47140

IBM CICS Transaction Gateway 9.3 (Containers) is affected by CVE-2023-47140 due to improper access controls that could allow a user to transfer or view files. The IBM Security Bulletin (CA480D0E529A...) states affected product: CICS Transaction Gateway Containers 9.3, with remediation guidance po...

8.1CVSS5.9AI score0.0022EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/08 12:00 a.m.•3 views

CVE-2023-47140: Incorrect Privilege Assignment

IBM CICS Transaction Gateway 9.3 could allow a user to transfer or view files due to improper access controls...

8.1CVSS7.6AI score0.0022EPSS
SaveExploits0References2
Rows per page
Query Builder