Vulnerabilities > Rhinosoft
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2010-11-03 | CVE-2010-4154 | Path Traversal vulnerability in Rhinosoft FTP Voyager Directory traversal vulnerability in Rhino Software, Inc. | 9.3 |
2010-05-26 | CVE-2009-4873 | Buffer Errors vulnerability in Rhinosoft Serv-U 9.0.0.5 Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of service (server crash) or execute arbitrary code via a long Session cookie. | 10.0 |
2007-02-22 | CVE-2007-1079 | Stack Buffer Overflow vulnerability in FTP Voyager CWD Parameter Stack-based buffer overflow in Rhino Software, Inc. | 7.8 |
2004-09-18 | CVE-2004-1691 | Denial Of Service And Cross-Site Scripting vulnerability in Rhinosoft Dns4Me 3.0.0.4 The Web Server in DNS4Me 3.0.0.4 allows remote attackers to cause a denial of service (CPU consumption and crash) via a large amount of data. | 5.0 |
2004-09-18 | CVE-2004-1690 | Denial Of Service And Cross-Site Scripting vulnerability in Rhinosoft Dns4Me 3.0.0.4 Cross-site scripting (XSS) vulnerability in the Web Server in DNS4Me 3.0.0.4 allows remote attackers to execute arbitrary web script or HTML via the URL. network rhinosoft | 4.3 |
2004-04-14 | CVE-2004-1939 | Cross-Site Scripting vulnerability in Rhino Software Zaep Antispam 2.0/2.0.0.1 Cross-site scripting (XSS) vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or HTML via double encoded slashes (%252F) in the key parameter. network rhinosoft | 4.3 |
2001-03-03 | CVE-2001-1103 | Unspecified vulnerability in Rhinosoft FTP Voyager FTP Voyager ActiveX control before 8.0, when it is marked as safe for scripting (the default) or if allowed by the IObjectSafety interface, allows remote attackers to execute arbitrary commands. | 7.5 |