Lucene search
K

3492 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-45103

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked...

8.1CVSS7.2AI score0.0086EPSS
Exploits0References2
OSV
OSV
added 2025/08/29 11:18 a.m.5 views

OESA-2025-2092 buildah security update

The package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a new image...

7.5CVSS6.9AI score0.00868EPSS
Exploits0References2
NCSC
NCSC
added 2025/08/28 7:59 a.m.8 views

Vulnerability fixed in CrushFTP

CrushFTP has fixed a vulnerability in versions 10 through 10.8.5 and 11 through 11.3.423. The vulnerability is located in CrushFTP's AS2 validation. This vulnerability allows an attacker to gain administrative access via HTTPS, especially when the DMZ proxy feature is not used. The vulnerability...

9.8CVSS7.2AI score0.92034EPSS
Exploits7References1
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2022-32278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server. CVE-2022-32278 Note that...

8.8CVSS7.7AI score0.015EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2020-25651

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the SPICE file transfer protocol. File data from the host system can end up in full or in parts in the client connection of an illegitimate...

6.4CVSS6.2AI score0.00286EPSS
Exploits1References2
CVE
CVE
added 2025/08/25 8:52 a.m.23 views

CVE-2025-7426

The CVE-2025-7426 entry relates to MINOVA TTA, where the FTP credentials are exposed through the debug port 1604 on the MINOVA TTA service. This allows unauthenticated remote access to an active FTP account and could enable data manipulation or extraction in automated processes (EDI/data integrat...

9.3CVSS7.2AI score0.00343EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/08/25 12:0 a.m.5 views

MINOVA TTA 安全漏洞

MINOVA TTA is an automated oil loading and unloading system from MINOVA, Germany. A security vulnerability exists in MINOVA TTA that originates from the exposure of FTP credentials on debug port 1604, which could lead to unauthenticated remote access and data disclosure...

9.3CVSS6.8AI score0.00343EPSS
Exploits0References3
Redos
Redos
added 2025/08/25 12:0 a.m.2 views

ROS-20250825-04

A vulnerability in ASGI Starlette toolkit for creating asynchronous Python web services is related to blocking the main thread for transferring a file to disk. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

5.3CVSS7.1AI score0.00526EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/08/25 12:0 a.m.3 views

PT-2025-34601 · Unknown · Minova Tta

Name of the Vulnerable Software and Affected Versions: MINOVA TTA version 11.17.0 Description: The MINOVA TTA service exposes authentication FTP credentials through debug port 1604, allowing unauthenticated remote access to active FTP accounts containing sensitive internal data and import...

9.3CVSS6.7AI score0.00343EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2010-4756

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The glob implementation in the GNU C Library aka glibc or libc6 allows remote authenticated users to cause a denial of service CPU and memory consumption via...

4CVSS7.6AI score0.02633EPSS
Exploits2References2
RedhatCVE
RedhatCVE
added 2025/08/23 8:13 p.m.5 views

CVE-2010-20034

Gekko Manager FTP Client = 0.77 contains a stack-based buffer overflow in its FTP directory listing parser. When processing a server response to a LIST command, the client fails to properly validate the length of filenames. A crafted response containing an overly long filename can overwrite the...

8.5CVSS8.2AI score0.00476EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/22 4:35 p.m.4 views

CVE-2010-20049

LeapFTP 3.1.x contains a stack-based buffer overflow vulnerability in its FTP client parser. When the client receives a directory listing containing a filename longer than 528 bytes, the application fails to properly bound-check the input and overwrites the Structured Exception Handler SEH chain...

9.3CVSS8.4AI score0.00743EPSS
Exploits0References1
NVD
NVD
added 2025/08/21 9:15 p.m.3 views

CVE-2010-20108

FTPPad = 1.2.0 contains a stack-based buffer overflow vulnerability in its FTP directory listing parser. When the client connects to an FTP server and receives a crafted response to a LIST command containing an excessively long directory and filename, the application fails to properly validate...

8.4CVSS0.00476EPSS
Exploits0References5
NVD
NVD
added 2025/08/21 9:15 p.m.7 views

CVE-2010-20007

Seagull FTP Client = v3.3 Build 409 contains a stack-based buffer overflow vulnerability in its FTP directory listing parser. When the client connects to an FTP server and receives a crafted response to a LIST command containing an excessively long filename, the application fails to properly...

8.5CVSS0.00476EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2025/08/21 8:16 p.m.8 views

CVE-2010-20122 Xftp FTP Client <= 3.0 PWD Response Buffer Overflow

Xftp FTP Client version up to and including 3.0 build 0238 contain a stack-based buffer overflow vulnerability triggered by a maliciously crafted PWD response from an FTP server. When the client connects to a server and receives an overly long directory string in response to the PWD command, the...

9.3CVSS8.7AI score0.00947EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/08/21 8:15 p.m.4 views

CVE-2010-20115 Vermillion FTP <= 1.31 Daemon PORT Command Memory Corruption

Arcane Software’s Vermillion FTP Daemon vftpd versions up to and including 1.31 contains a memory corruption vulnerability triggered by a malformed FTP PORT command. The flaw arises from an out-of-bounds array access during input parsing, allowing an attacker to manipulate stack memory and...

9.3CVSS7.9AI score0.0086EPSS
Exploits0References7
CVE
CVE
added 2025/08/21 8:13 p.m.19 views

CVE-2010-20007

CVE-2010-20007 concerns Seagull FTP Client

8.5CVSS8.6AI score0.00476EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2025/08/21 8:12 p.m.3 views

CVE-2010-20034

Gekko Manager FTP Client = 0.77 contains a stack-based buffer overflow in its FTP directory listing parser. When processing a server response to a LIST command, the client fails to properly validate the length of filenames. A crafted response containing an overly long filename can overwrite the...

8.5CVSS6.4AI score0.00476EPSS
Exploits0References5
CVE
CVE
added 2025/08/21 8:11 p.m.11 views

CVE-2010-20108

CVE-2010-20108 affects FTPPad

8.4CVSS8.4AI score0.00476EPSS
Exploits0References5
CVE
CVE
added 2025/08/21 8:11 p.m.27 views

CVE-2010-20107

CVE-2010-20107 describes a stack-based buffer overflow in FTP Synchronizer Professional prior to or equal to 4.0.73.274. When the client issues a LIST command, a server response containing an overly long filename can overflow the buffer and corrupt the Structured Exception Handler (SEH), potentia...

8.5CVSS8.6AI score0.00476EPSS
Exploits0References6
Rows per page
Query Builder