CVE-2018-5261: Missing Encryption of Sensitive Data

An issue was discovered in Flexense DiskBoss 8.8.16 and earlier. Due to the usage of plaintext information from the handshake as input for the encryption key used for the encryption of the rest of the session, the server and client disclose sensitive information, such as the authentication...

CVE-2018-5359

The server in Flexense SysGauge 3.6.18 operating on port 9221 can be exploited remotely with the attacker gaining system-level access because of a Buffer Overflow...

Buffer overflow

The server in Flexense SysGauge 3.6.18 operating on port 9221 can be exploited remotely with the attacker gaining system-level access because of a Buffer Overflow...

CVE-2018-5359

The server in Flexense SysGauge 3.6.18 operating on port 9221 can be exploited remotely with the attacker gaining system-level access because of a Buffer Overflow...

CVE-2018-5359

CVE-2018-5359 affects Flexense SysGauge Server 3.6.18, running on port 9221. The server is vulnerable to a remote buffer overflow that can grant system‑level access to an unauthenticated attacker. Public exploits exist (e.g., Exploit-DB, PacketStorm) demonstrating unauthenticated remote buffer ov...

CVE-2018-5359

The server in Flexense SysGauge 3.6.18 operating on port 9221 can be exploited remotely with the attacker gaining system-level access because of a Buffer Overflow...

CVE-2018-5359: Improper Restriction of Operations within the Bounds of a Memory Buffer

The server in Flexense SysGauge 3.6.18 operating on port 9221 can be exploited remotely with the attacker gaining system-level access because of a Buffer Overflow...

Flexense DiskBoss Buffer Overflow Vulnerability

Flexense DiskBoss is a rules-based automated data management solution from Flexense Canada. A buffer overflow vulnerability exists in Flexense DiskBoss versions 8.8.16 and earlier. A remote attacker could exploit this vulnerability to execute arbitrary code in the context of an elevated privilege...

Flexense SysGauge Buffer Overflow Vulnerability

Flexense SysGauge is a suite of free system performance monitoring applications from Flexense USA. A buffer overflow vulnerability exists in the server in Flexense SysGauge version 3.6.18. When running on port 9221, a remote attacker can exploit this vulnerability to gain system-level access...

Flexense Disk Pulse Enterprise Control Protocol Denial of Service Vulnerability

Flexense Disk Pulse Enterprise is a suite of disk monitoring tools from Flexense Canada, with Control Protocol as one of the control protocols. A denial of service vulnerability exists in Control Protocol in Flexense Disk Pulse Enterprise version 10.1.18. The vulnerability can be exploited to cau...

CVE-2018-5262

A stack-based buffer overflow in Flexense DiskBoss 8.8.16 and earlier allows unauthenticated remote attackers to execute arbitrary code in the context of a highly privileged account...

CVE-2018-5262

DiskBoss Enterprise 8.8.16 and earlier contains a stack-based buffer overflow in the web server that allows a remote attacker to execute arbitrary code with high privileges. Public records (CVE-2018-5262) describe remote code execution via improper bounds checking; various sources cite exploit sa...

CVE-2018-5262: Out-of-bounds Write

A stack-based buffer overflow in Flexense DiskBoss 8.8.16 and earlier allows unauthenticated remote attackers to execute arbitrary code in the context of a highly privileged account...

CVE-2017-15665

In Flexense DiskBoss Enterprise 8.5.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVERGETINFO packet sent to control port 8094...

CVE-2017-15665

In Flexense DiskBoss Enterprise 8.5.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVERGETINFO packet sent to control port 8094...

CVE-2017-15664

In Flexense Sync Breeze Enterprise v10.1.16, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVERGETINFO packet sent to control port 9121...

CVE-2017-15664

In Flexense Sync Breeze Enterprise v10.1.16, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVERGETINFO packet sent to control port 9121...

CVE-2017-15663

In Flexense Disk Pulse Enterprise v10.1.18, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVERGETINFO packet sent to control port 9120...

CVE-2017-15662

In Flexense VX Search Enterprise v10.1.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVERGETINFO packet sent to control port 9123...

Denial of service

In Flexense DiskBoss Enterprise 8.5.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVERGETINFO packet sent to control port 8094...