6453 matches found
CVE-2021-41636
MELAG FTP Server 2.2.0.4 exposes a directory-traversal issue: the CWD command can break out of the FTP server’s root and allow an attacker to operate on the underlying OS, constrained only by the user’s access restrictions. Affected: MELAG FTP Server 2.2.0.4. Root cause: path handling in CWD enab...
CVE-2021-41637
Weak access control permissions in MELAG FTP Server 2.2.0.4 allow the "Everyone" group to read the local FTP configuration file, which includes among other information the unencrypted passwords of all FTP users...
CVE-2021-41637
CVE-2021-41637 concerns MELAG FTP Server 2.2.0.4 with weak access control that permits the Everyone group to read the local FTP configuration file, exposing unencrypted passwords of all FTP users. The connected CNVD/CVE entries describe this as an authorization issue rooted in improper file permi...
CVE-2021-41638
Summary (CVE-2021-41638) The issue affects MELAG FTP Server (version 2.2.0.4), where authentication checks are incomplete. This allows a remote attacker to access local files using a valid username. The Red Hat, NVD, CNVD, and other entries corroborate the vulnerability description; no specific e...
CVE-2021-41638
The authentication checks of the MELAG FTP Server in version 2.2.0.4 are incomplete, which allows a remote attacker to access local files only by using a valid username...
CVE-2021-41639
MELAG FTP Server 2.2.0.4 stores unencrpyted passwords of FTP users in a local configuration file...
CVE-2021-41639
The CVE describes MELAG FTP Server 2.2.0.4 storing unencrypted FTP user passwords in a local configuration file, causing information disclosure. Root cause: passwords stored in plaintext locally. Impact: unauthorized disclosure of sensitive credentials potentially accessible to an attacker with l...
MELAG FTP Server 安全漏洞
MELAG FTP Server, an FTP server from MELAG Germany, is vulnerable to an authorization issue in MELAG FTP Server version 2.2.0.4, which stems from improper file permission management and could be exploited to cause the "Everyone" group to read local FTP configuration file, which includes informati...
The vulnerability of the Titan FTP Server NextGen installer allows a hacker to execute arbitrary commands with elevated privileges.
The vulnerability of the Titan FTP Server NextGen installer is related to errors during the installation of Microsoft SQL Express 2019. Exploiting this vulnerability allows an attacker to execute arbitrary commands with elevated privileges...
MELAG FTP Server 安全漏洞
MELAG FTP Server is an FTP server from the German company MELAG. version 2.2.0.4 of MELAG FTP Server is vulnerable to a user enumeration vulnerability, which stems from the fact that the program presents different responses to users and non-users, and can be exploited by attackers to identify...
MELAG FTP Server 路径遍历漏洞
MELAG FTP Server is an FTP server from the German company MELAG. A security vulnerability exists in MELAG FTP Server version 2.2.0.4, which originates from a system that allows an attacker to break into the root directory of the FTP server and run it on the entire operating system using the CWD...
MELAG FTP Server 安全漏洞
MELAG FTP Server is an FTP server from the German company MELAG. A security vulnerability exists in MELAG FTP Server version 2.2.0.4, which can be exploited by a remote attacker to gain administrative access to the entire host system...
The vulnerability of the FTP server Titan FTP Server NextGen, related to the use of pre-installed credentials for the sa account, allows attackers to increase their privileges.
The vulnerability of the Titan FTP Server NextGen installer lies in the use of pre-installed credentials for the sa account. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...
Debian: Security Advisory (DLA-3056-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2022-3053 · South River Technologies +1 · Titan Ftp Server Nextgen +1
Name of the Vulnerable Software and Affected Versions: Titan FTP Server NextGen versions prior to 1.2.1050 Description: The issue is related to errors during the installation of Microsoft SQL Express 2019, which allows an attacker to execute arbitrary commands with elevated privileges. When...
Exploit for CVE-2022-31749
Hook Hook exploits a parameter injection vulnerability in the...
DEBIAN-CVE-2022-32278
XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server...
CVE-2022-32278
XFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server...
