CVE-2017-6803

CVE-2017-6803 affects SolarWinds (formerly Serv-U) FTP Voyager Scheduler 16.2.0. The vulnerability is described as multiple cross-site request forgery (CSRF) flaws in the Scheduler web interface that let an attacker hijack a user’s session to perform actions such as (1) changing the admin passwor...

CVE-2018-25252

The CVE-2018-25252 entry concerns FTP Voyager 16.2.0, where a denial-of-service condition arises from a buffer overflow caused by injecting oversized data into the site profile IP field. Attackers can craft a site profile containing about 500 bytes of repeated characters and paste it into the IP ...