Lucene search
K

43 matches found

Circl
Circl
added 2026/05/06 1:28 p.m.4 views

CVE-1999-0497

creationtimestamp| type| source ---|---|--- 2026-05-06 13:28:27+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ftp/ftpanonymous.rb...

5.7AI score0.34725EPSS
Exploits1References1
NVD
NVD
added 2026/03/22 2:16 p.m.2 views

CVE-2019-25614

Free Float FTP 1.0 contains a buffer overflow vulnerability in the STOR command handler that allows remote attackers to execute arbitrary code by sending a crafted STOR request with an oversized payload. Attackers can authenticate with anonymous credentials and send a malicious STOR command...

9.8CVSS0.00858EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/03/22 1:38 p.m.27 views

CVE-2019-25614 Free Float FTP 1.0 STOR Command Remote Buffer Overflow

Free Float FTP 1.0 contains a buffer overflow vulnerability in the STOR command handler that allows remote attackers to execute arbitrary code by sending a crafted STOR request with an oversized payload. Attackers can authenticate with anonymous credentials and send a malicious STOR command...

9.8CVSS0.00858EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/03/22 1:38 p.m.1 views

CVE-2019-25614 Free Float FTP 1.0 STOR Command Remote Buffer Overflow

Free Float FTP 1.0 contains a buffer overflow vulnerability in the STOR command handler that allows remote attackers to execute arbitrary code by sending a crafted STOR request with an oversized payload. Attackers can authenticate with anonymous credentials and send a malicious STOR command...

9.8CVSS6.9AI score0.00858EPSS
Exploits1References3
OSV
OSV
added 2025/10/09 5:15 p.m.0 views

CVE-2025-59980

An Authentication Bypass by Primary Weakness in the FTP server of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to get limited read-write access to files on the device. When the FTP server is enabled and a user named "ftp" or "anonymous" is configured, that user can...

6.9CVSS5.8AI score0.00045EPSS
Exploits0References1
CVE
CVE
added 2025/10/09 4:5 p.m.12 views

CVE-2025-59980

Summary of CVE-2025-59980 : Juniper Networks Junos OS FTP server contains an authentication bypass. When the FTP server is enabled and a user named “ftp” or “anonymous” exists, an unauthenticated attacker can log in without a password and gain read/write access to the user’s home directory. Affec...

6.9CVSS6.7AI score0.00045EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2021-1504

Malware in sbrugna...

6.5CVSS6.4AI score0.00218EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2024-2134

Malicious code in bioql PyPI...

9.8CVSS9AI score0.00592EPSS
Exploits0References6
Veracode
Veracode
added 2024/06/14 5:19 a.m.14 views

Arbitrary File Read/Write

github.com/projectdiscovery/interactsh is vulnerable to Arbitrary File Read/Write. The vulnerability is due to improper smb server restrictions which allows an attacker to read/write any files in the directory and subdirectories of where the victim runs interactsh-server via anonymous login...

9.8CVSS7AI score0.00592EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2024/06/06 7:15 p.m.2 views

CVE-2024-22326

IBM System Storage DS8900F 89.22.19.0, 89.30.68.0, 89.32.40.0, 89.33.48.0, 89.40.83.0, and 89.40.93.0 could allow a remote user to create an LDAP connection with a valid username and empty password to establish an anonymous connection. IBM X-Force ID: 279518...

6.3CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2024/06/05 6:30 a.m.19 views

GHSA-Q5MG-PC7R-R8CR Files or Directories Accessible to External Parties in ProjectDiscovery

Files or Directories Accessible to External Parties vulnerability in smb server in ProjectDiscovery Interactsh allows remote attackers to read/write any files in the directory and subdirectories of where the victim runs interactsh-server via anonymous login...

9.8CVSS9.4AI score0.00592EPSS
Exploits0References6
OSV
OSV
added 2024/06/05 4:15 a.m.15 views

CVE-2024-5262

Files or Directories Accessible to External Parties vulnerability in smb server in ProjectDiscovery Interactsh allows remote attackers to read/write any files in the directory and subdirectories of where the victim runs interactsh-server via anonymous login...

9.8CVSS9.4AI score
Exploits0References2
NVD
NVD
added 2024/06/05 4:15 a.m.33 views

CVE-2024-5262

Files or Directories Accessible to External Parties vulnerability in smb server in ProjectDiscovery Interactsh allows remote attackers to read/write any files in the directory and subdirectories of where the victim runs interactsh-server via anonymous login...

9.8CVSS6.7AI score0.00592EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/06/05 4:0 a.m.28 views

CVE-2024-5262 ProjectDiscovery Interactsh - Files or Directories Accessible to External Parties

Files or Directories Accessible to External Parties vulnerability in smb server in ProjectDiscovery Interactsh allows remote attackers to read/write any files in the directory and subdirectories of where the victim runs interactsh-server via anonymous login...

9.3CVSS6.6AI score0.00592EPSS
Exploits0References2
Hacker One
Hacker One
added 2023/07/24 7:27 a.m.190 views

U.S. Dept Of Defense: LDAP Anonymous Login enabled in ████

LDAP Anonymous Login was enabled in ██████████, allowing unauthorized users to connect to the LDAP server without providing any authentication credentials. This could lead to unauthorized access and retrieval of sensitive information stored in the LDAP directory...

6.7AI score
Exploits0
CNNVD
CNNVD
added 2022/12/12 12:0 a.m.2 views

HCL Technologies HCL Sametime 安全漏洞

HCL Technologies HCL Sametime is a conferencing solution from HCL Technologies, USA. A security vulnerability exists in HCL Technologies HCL Sametime 12 that stems from an anonymous user logging in and being able to browse the user directory and potentially create chats with internal users...

6.5CVSS6.5AI score0.00236EPSS
Exploits0References2
OSV
OSV
added 2021/11/10 11:15 p.m.1 views

CVE-2021-40872

An issue was discovered in Softing Industrial Automation uaToolkit Embedded before 1.40. Remote attackers to cause a denial of service DoS or login as an anonymous user bypassing security checks by sending crafted messages to a OPC/UA server. The server process may crash unexpectedly because of a...

7.5CVSS7.1AI score0.00665EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/11/10 12:0 a.m.3 views

sofiting Industrial Automation utoolkit 安全漏洞

Softing Industrial Automation UaToolkit Embedded is used to support the development of embedded Opc Ua applications via client/server and publisher/subscriber communications from Softing Industrial Automation, Germany. A security vulnerability exists in sofiting Industrial Automation utoolkit,...

7.5CVSS7.4AI score0.00665EPSS
Exploits0References2
CVE
CVE
added 2021/08/18 9:40 p.m.87 views

CVE-2021-39138

Parse Server prior to v4.5.1 incorrectly classifies anonymous sessions as password-created when first signing up via REST, due to the createdWith value in _Session. This affects only developers who rely on createdWith for access control; the vulnerability is fixed in 4.5.1. The recommended workar...

6.5CVSS5.6AI score0.00218EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/23 12:0 a.m.3 views

The vulnerability of the ABB eSOMS software for managing production processes is related to the improper functioning of the authentication mechanism, allowing an intruder to gain unauthorized access to the system.

The vulnerability of the ABB eSOMS production process management software is related to the improper operation of the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the system. This occurs when LDAP is configured f...

9.8CVSS7.8AI score0.03317EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder