CVE-2018-6481

Disk Savvy Enterprise v10.4.18 is affected by a remote buffer overflow in the program’s control protocol (port 9124). The issue allows an unauthenticated attacker to send a crafted packet to the built-in server, potentially yielding arbitrary code execution. Multiple sources (NVD entry, CNVD, CNV...

CVE-2017-13696

CVE-2017-13696 describes a buffer overflow in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze Enterprise 9.9.16, and Disk Pulse Enterprise 9.9.16, triggered by crafting a malicious GET request. The flaw arises from improper handling/sanitization ...

CVE-2018-10565

CVE-2018-10565 affects Flexense DiskSavvy Enterprise (vendor Flexense Canada) versions 10.4 through 10.7 with a cross-site scripting (XSS) vulnerability. The publicly connected sources describe a remote XSS issue that could allow an attacker to execute code in the context of the user session, pot...

CVE-2021-47805

Disk Savvy 13.6.14 exposes an unquoted service path in its Windows service configuration, enabling local attackers to potentially execute arbitrary code with elevated LocalSystem privileges. The initial descriptions state this risk due to unquoted service binaries, but there are no official patch...