16977 matches found
CVE-2021-41638
Summary (CVE-2021-41638) The issue affects MELAG FTP Server (version 2.2.0.4), where authentication checks are incomplete. This allows a remote attacker to access local files using a valid username. The Red Hat, NVD, CNVD, and other entries corroborate the vulnerability description; no specific e...
CVE-2021-41638
The authentication checks of the MELAG FTP Server in version 2.2.0.4 are incomplete, which allows a remote attacker to access local files only by using a valid username...
CVE-2021-41639
MELAG FTP Server 2.2.0.4 stores unencrpyted passwords of FTP users in a local configuration file...
CVE-2021-41639
The CVE describes MELAG FTP Server 2.2.0.4 storing unencrypted FTP user passwords in a local configuration file, causing information disclosure. Root cause: passwords stored in plaintext locally. Impact: unauthorized disclosure of sensitive credentials potentially accessible to an attacker with l...
MELAG FTP Server 安全漏洞
MELAG FTP Server, an FTP server from MELAG Germany, is vulnerable to an authorization issue in MELAG FTP Server version 2.2.0.4, which stems from improper file permission management and could be exploited to cause the "Everyone" group to read local FTP configuration file, which includes informati...
MELAG FTP Server 安全漏洞
MELAG FTP Server is an FTP server from the German company MELAG. version 2.2.0.4 of MELAG FTP Server is vulnerable to a user enumeration vulnerability, which stems from the fact that the program presents different responses to users and non-users, and can be exploited by attackers to identify...
MELAG FTP Server 路径遍历漏洞
MELAG FTP Server is an FTP server from the German company MELAG. A security vulnerability exists in MELAG FTP Server version 2.2.0.4, which originates from a system that allows an attacker to break into the root directory of the FTP server and run it on the entire operating system using the CWD...
The vulnerability of the Titan FTP Server NextGen installer allows a hacker to execute arbitrary commands with elevated privileges.
The vulnerability of the Titan FTP Server NextGen installer is related to errors during the installation of Microsoft SQL Express 2019. Exploiting this vulnerability allows an attacker to execute arbitrary commands with elevated privileges...
MELAG FTP Server 安全漏洞
MELAG FTP Server is an FTP server from the German company MELAG. A security vulnerability exists in MELAG FTP Server version 2.2.0.4, which can be exploited by a remote attacker to gain administrative access to the entire host system...
The vulnerability of the FTP server Titan FTP Server NextGen, related to the use of pre-installed credentials for the sa account, allows attackers to increase their privileges.
The vulnerability of the Titan FTP Server NextGen installer lies in the use of pre-installed credentials for the sa account. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...
Debian: Security Advisory (DLA-3056-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands may be vulnerable to loss of confidentiality due to CVE-2021-4189
Summary Python is included in the DesignerAuthoring component when Mapping Assist is enabled. The Python FTP module is vulnerable due to CVE-2021-4189. IBM App Connect Enterprise Certified Container is not directly vulnerable under standard operations, but custom use of the images may be vulnerab...
PT-2022-3157 · Emerson · Emerson Deltav Distributed Control System
Name of the Vulnerable Software and Affected Versions: Emerson DeltaV Distributed Control System DCS controllers and IO cards through 2022-04-29 Description: The issue is related to the misuse of passwords and the presence of hardcoded credentials in the FTP service of the Emerson DeltaV...
Security Bulletin: IBM Sterling Connect:Direct FTP+ is vulnerable to unauthorized sensitive information access due to IBM Java vulnerability (CVE-2021-35603)
Summary IBM Java is used by IBM Sterling Connect:Direct FTP+ on AIX, Linux, Solaris, and Windows platforms in product configuration and data transmission. IBM Sterling Connect:Direct FTP+ on AIX, Linux, Solaris, and Windows platforms is impacted by an unauthorized sensitive information access iss...
Security Bulletin: IBM Sterling Connect:Direct FTP+ is vulnerable to unauthorized data access due to IBM Java (CVE-2021-35550)
Summary IBM Java is used by IBM Sterling Connect:Direct FTP+ on AIX, Linux, Solaris, and Windows platforms in product configuration and data transmission. IBM Sterling Connect:Direct FTP+ on AIX, Linux, Solaris, and Windows platforms is impacted by an unauthorized data access issue in IBM Java...
CVE-2022-34006
An issue was discovered in TitanFTP aka Titan FTP NextGen before 1.2.1050. When installing, Microsoft SQL Express 2019 installs by default with an SQL instance running as SYSTEM with BUILTIN\Users as sysadmin, thus enabling unprivileged Windows users to execute commands locally as NT...
PT-2022-3053 · South River Technologies +1 · Titan Ftp Server Nextgen +1
Name of the Vulnerable Software and Affected Versions: Titan FTP Server NextGen versions prior to 1.2.1050 Description: The issue is related to errors during the installation of Microsoft SQL Express 2019, which allows an attacker to execute arbitrary commands with elevated privileges. When...
EulerOS 2.0 SP5 : python (EulerOS-SA-2022-1911)
According to the versions of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Python, specifically in the FTP File Transfer Protocol client library in PASV passive mode. The issue is how the FTP client...
