Lucene search
+L

1197 matches found

Hacker One
Hacker One
added 2020/02/17 9:45 p.m.52 views

FileZilla: FileZilla 3.46.3 - 'Scale factor' Buffer Overflow

Summary: FileZilla in has a problem in the "Scale Factor" field is vulnerable to a Buffer Over Flow attack or a denial attack. Adding random characters in an entry that must accept only Float input type values. Steps To Reproduce: A python file of name generatepaste.py was generated for the...

2.1AI score
SaveExploits0
CNVD
CNVD
added 2020/02/17 12:0 a.m.5 views

FTPGetter Code Issue Vulnerability

FTPGetter is a file transfer tool from the FTPGetter team that supports FTP and SFTP protocols. A code issue vulnerability exists in FTPGetter Professional Edition version 5.97.0.223. The vulnerability stems from an improperly designed or implemented code development process for a network system ...

7.5CVSS7.2AI score0.02013EPSS
SaveExploits5References1
BDU FSTEC
BDU FSTEC
added 2020/02/17 12:0 a.m.6 views

The vulnerability of the FTP file transfer protocol in Firefox browsers allows a hacker to induce a service failure.

The vulnerability of the FTP file transfer protocol in Firefox browsers is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

7.5CVSS7.4AI score0.01641EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/02/17 12:0 a.m.8 views

The vulnerability of the FTP file transfer protocol in Firefox browsers allows attackers to compromise data integrity.

The vulnerability of the FTP file transfer protocol in Firefox is related to an initialization error in the modal notification that can be triggered when the page is reloaded. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

4.3CVSS6.7AI score0.00791EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/02/17 12:0 a.m.13 views

The vulnerability of the FTP file transfer protocol in Firefox browsers allows a hacker to induce a service failure.

The vulnerability of the FTP file transfer protocol in Firefox browsers is related to an authentication error that occurs when modal pop-ups are displayed. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS7.4AI score0.01081EPSS
SaveExploits0References5Affected Software3
OSV
OSV
added 2020/02/10 4:15 p.m.7 views

CVE-2019-19665

A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnerability can result in manipulation of Server FTP settings at RAPR/FTPSettingsSet.html...

6.5CVSS6.6AI score0.00435EPSS
SaveExploits0References2
OSV
OSV
added 2020/02/04 9:15 p.m.5 views

ALPINE-CVE-2019-12528

An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions or non-Squid processes...

7.5CVSS6.5AI score0.10493EPSS
SaveExploits0References1
OSV
OSV
added 2020/02/04 9:15 p.m.5 views

UBUNTU-CVE-2019-12528

An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions or non-Squid processes...

7.5CVSS6.6AI score0.10493EPSS
SaveExploits0References4
Packet Storm
Packet Storm
added 2020/01/23 12:0 a.m.137 views

Pachev FTP Server 1.0 Path Traversal

Exploit Title: Pachev FTP Server 1.0 - Path Traversal Date: 2020-01-23 Vulnerability: Path Traversal Exploit Author: 1F98D Vendor Homepage: https://github.com/pachev/pachevftp from ftplib import FTP ip = rawinput"Target IP: " port = intrawinput"Target Port: " ftp = FTP ftp.connecthost=ip, port=po...

0.1AI score
SaveExploits0
CNVD
CNVD
added 2020/01/14 12:0 a.m.2 views

Denial of Service Vulnerability in Quick Easy FTP Server (CNVD-2020-12893)

Quick Easy FTP Server is a small FTP server. A denial of service vulnerability exists in Quick Easy FTP Server. An attacker can exploit the vulnerability to cause a denial of service...

6.7AI score
SaveExploits0
OSV
OSV
added 2019/12/13 11:15 p.m.3 views

CVE-2019-5255

Certain Huawei products AP2000;IPS Module;NGFW Module;NIP6300;NIP6600;NIP6800;S5700;SVN5600;SVN5800;SVN5800-C;SeMG9811;Secospace AntiDDoS8000;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG6000V;eSpace U1981 have a DoS vulnerability. An attacker may send crafted messages from a FTP clie...

5.5CVSS6.1AI score0.00199EPSS
SaveExploits0References1
OSV
OSV
added 2019/12/13 6:15 a.m.4 views

CVE-2019-19782

The FTP client in AceaXe Plus 1.0 allows a buffer overflow via a long EHLO response from an FTP server...

9.8CVSS7.6AI score0.03153EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.7 views

The vulnerability of the FTP protocol implementation that supports Kerberos authentication, as provided by the libcurl library, relates to the reallocation of memory. This vulnerability allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the FTP protocol implementation that supports Kerberos authentication, when using the libcurl library, is related to a memory reclamation error. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

9.8CVSS6.3AI score0.07266EPSS
SaveExploits0References14Affected Software5
OSV
OSV
added 2019/12/12 7:15 p.m.5 views

CVE-2019-18342

A vulnerability has been identified in Control Center Server CCS All versions V1.5.0. The SFTP service default port 22/tcp of the Control Center Server CCS does not properly limit its capabilities to the specified purpose. In conjunction with CVE-2019-18341, an unauthenticated remote attacker wit...

9.9CVSS6.7AI score0.02126EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/12/11 12:0 a.m.7 views

The vulnerability of the FTP server of the EKRA 200 series micro-processor terminal allows a hacker to gain access to arbitrary data in the file system.

The vulnerability of the FTP server of the EKRA 200 series micro-processor terminals is related to security flaws in their mechanisms. Exploiting this vulnerability allows a malicious actor to gain access to arbitrary files on the file system using the RETR command...

7.8CVSS5.6AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.8 views

The vulnerability of Modicon microprogrammed controllers lies in the lack of checks for the integrity of updates to the embedded software. This allows a malicious actor to download the updated embedded software with an empty file via FTP protocol, thereby causing a service failure.

The vulnerability of Modicon microprogrammed controllers lies in the lack of checks for the integrity of updates to the embedded software. Exploiting this vulnerability allows a malicious actor to download the embedded software update with an empty file via FTP protocol, thereby causing service...

6.8CVSS5.6AI score0.00959EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.8 views

The vulnerability of Modicon microprogrammed controllers lies in the lack of checks for the integrity of updates to the embedded software. This allows a malicious actor to download the updated embedded software from a compromised FTP server, thereby causing malfunctions of the controller.

The vulnerability of Modicon microprogrammed controllers lies in the lack of checks for the integrity of updates to the embedded software. Exploiting this vulnerability allows a malicious actor to download updates to the embedded software from a compromised FTP server, thereby causing service...

6.8CVSS5.6AI score0.00959EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.8 views

The vulnerability of Modicon microprogrammed controllers lies in the lack of checks for the integrity of updates to the embedded software. This allows a malicious entity to download the update without the presence of the software via FTP protocol, thereby causing service failure.

The vulnerability of Modicon microprogrammed controllers lies in the lack of checks for the integrity of updates to the embedded software. Exploiting this vulnerability allows a malicious actor to download updates to the embedded software without any interaction with the software via FTP protocol...

6.8CVSS5.6AI score0.24374EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.5 views

The vulnerability of Modicon microprogrammed controllers lies in the lack of version checking for installed software updates. This allows a malicious individual to download an unpatched version of the installed software via FTP, thereby causing a service failure.

The vulnerability of Modicon microprogrammed controllers lies in the lack of verification of the version of the embedded software updates. Exploiting this vulnerability allows a malicious actor to download an un-supported version of the embedded software via FTP protocol, thereby causing service...

6.8CVSS5.6AI score0.00959EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.6 views

The vulnerability of Modicon microprogrammed controllers relates to the transmission of confidential information in open text using the FTP protocol, allowing a intruder to disclose the protected information.

The vulnerability of Modicon microprogrammed controllers relates to the transmission of confidential information in open text using the FTP protocol. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

7.1CVSS6.5AI score0.00981EPSS
SaveExploits0References4
Rows per page
Query Builder