Vulnerabilities > Winny

DATE CVE VULNERABILITY TITLE RISK
2010-08-25 CVE-2010-2362 Improper Input Validation vulnerability in Winny
Winny 2.0b7.1 and earlier does not properly process node information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks.
network
low complexity
winny CWE-20
critical
10.0
2010-08-25 CVE-2010-2361 Improper Input Validation vulnerability in Winny
Winny 2.0b7.1 and earlier does not properly process BBS information, which has unspecified impact and remote attack vectors that might lead to use of the product's host for DDoS attacks.
network
low complexity
winny CWE-20
critical
10.0
2006-04-25 CVE-2006-2007 Heap Overflow vulnerability in Winny File Transfer
Heap-based buffer overflow in Winny 2.0 b7.1 and earlier allows remote attackers to execute arbitrary code via long strings to certain commands sent to the file transfer port.
network
low complexity
winny
7.5