Lucene search
+L

2904 matches found

OSV
OSV
added 2026/05/12 9:16 p.m.12 views

DEBIAN-CVE-2026-44240

basic-ftp is an FTP client for Node.js. Prior to 5.3.1, basic-ftp is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious or compromised FTP server can send an unterminated multiline response during the initial FTP banner phase, before...

7.5CVSS5.9AI score0.00465EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/05/12 9:16 p.m.15 views

CVE-2026-44240

basic-ftp is an FTP client for Node.js. Prior to 5.3.1, basic-ftp is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious or compromised FTP server can send an unterminated multiline response during the initial FTP banner phase, before...

7.5CVSS6.2AI score0.00465EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/05/12 8:37 p.m.70 views

CVE-2026-44240 basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering

basic-ftp is an FTP client for Node.js. Prior to 5.3.1, basic-ftp is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious or compromised FTP server can send an unterminated multiline response during the initial FTP banner phase, before...

7.5CVSS0.00465EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/12 8:37 p.m.12 views

CVE-2026-44240 basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering

basic-ftp is an FTP client for Node.js. Prior to 5.3.1, basic-ftp is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious or compromised FTP server can send an unterminated multiline response during the initial FTP banner phase, before...

7.5CVSS6.1AI score
SaveExploits0References3
CVE
CVE
added 2026/05/12 8:37 p.m.69 views

CVE-2026-44240

CVE-2026-44240 affects the Node.js FTP client basic-ftp . Before version 5.3.1, the client is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious FTP server can send an unterminated multiline response during the initial banner phase, causi...

7.5CVSS5.9AI score0.00465EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/12 8:37 p.m.13 views

CVE-2026-44240 basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering

basic-ftp is an FTP client for Node.js. Prior to 5.3.1, basic-ftp is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious or compromised FTP server can send an unterminated multiline response during the initial FTP banner phase, before...

7.5CVSS5.9AI score0.00465EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/05/12 8:37 p.m.23 views

CVE-2026-44240

basic-ftp is an FTP client for Node.js. Prior to 5.3.1, basic-ftp is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious or compromised FTP server can send an unterminated multiline response during the initial FTP banner phase, before...

7.5CVSS5.9AI score0.00465EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/05/12 8:37 p.m.14 views

CVE-2026-44240

basic-ftp is an FTP client for Node.js. Prior to 5.3.1, basic-ftp is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious or compromised FTP server can send an unterminated multiline response during the initial FTP banner phase, before...

7.5CVSS5.9AI score0.00465EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/05/06 7:37 p.m.15 views

GHSA-RPMF-866Q-6P89 basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering

Summary basic-ftp is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious or compromised FTP server can send an unterminated multiline response during the initial FTP banner phase, before authentication. The client keeps appending...

7.5CVSS6AI score0.00465EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/05/06 7:37 p.m.16 views

basic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering

Summary basic-ftp is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious or compromised FTP server can send an unterminated multiline response during the initial FTP banner phase, before authentication. The client keeps appending...

7.5CVSS6AI score0.00465EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/05/06 3:32 p.m.17 views

EUVD-2026-27826

Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...

5.4CVSS6.2AI score0.00202EPSS
SaveExploits0References4
NVD
NVD
added 2026/05/06 2:16 p.m.21 views

CVE-2026-36358

Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...

5.4CVSS0.00202EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/06 1:51 p.m.10 views

CVE-2025-31975

HCL BigFix Service Management SM is affected by an Information Disclosure – Server Banner issue was identified. Exposed server banners may reveal software versions and system details, potentially aiding attackers in targeting known vulnerabilities...

2.6CVSS5.8AI score0.00172EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/06 1:51 p.m.13 views

CVE-2025-31975 HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified.

HCL BigFix Service Management SM is affected by an Information Disclosure – Server Banner issue was identified. Exposed server banners may reveal software versions and system details, potentially aiding attackers in targeting known vulnerabilities...

2.6CVSS5.8AI score0.00172EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/06 12:00 a.m.17 views

HCL BigFix Service Management 信息泄露漏洞

HCL BigFix Service Management is an IT service management and asset management platform developed by the Indian company HCL. HCL BigFix Service Management SM has a vulnerability related to information leakage. This vulnerability stems from the exposure of server banner information, allowing the...

5.3CVSS5.8AI score0.00172EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/06 12:00 a.m.16 views

Juzaweb CMS 跨站脚本漏洞

Juzaweb CMS is a content management system developed by Juzaweb’s individual developers, based on the Laravel framework and web platform. Version 5.0.0 of Juzaweb CMS has a cross-site scripting vulnerability. This vulnerability stems from the Add Banner Ads feature, which contains cross-site...

5.4CVSS5.8AI score0.00202EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/06 12:00 a.m.39 views

CVE-2026-36358

CVE-2026-36358 is a Cross Site Scripting vulnerability in Juzaweb CMS v5.0.0. The issue allows a remote attacker to execute arbitrary code via a crafted script submitted to the Add Banner Ads function. Connected documents confirm the same description across NVD, CVE List, and related feeds; no ex...

5.4CVSS6.2AI score0.00202EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/06 12:00 a.m.10 views

CVE-2026-36358

Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...

6.2AI score0.00202EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/06 12:00 a.m.18 views

PT-2026-38291

Name of the Vulnerable Software and Affected Versions basic-ftp versions 0.0.1 through 5.3.0 Description A client-side denial of service exists when parsing FTP control-channel multiline responses. A malicious or compromised FTP server can send an unterminated multiline response during the initia...

7.5CVSS5.9AI score0.00465EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
added 2026/05/06 12:00 a.m.22 views

PT-2026-37629

Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a crafted script to the Add Banner Ads function...

5.4CVSS6.2AI score0.00202EPSS
SaveExploits0References4
Rows per page
Query Builder