Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
2,065 results · page 41 of 42
Jul 12, 2000ftp.pl CGI program for Virtual Visions FTP browser allows remote attackers to read directories outside of the document root via a ..CVE-2000-0674 · Other software · Virtual Vision · reported by MITREMedium 5
ftp.pl CGI program for Virtual Visions FTP browser allows remote attackers to read directories outside of the document root via a .. (dot dot) attack.
- Product
- FTP Browser
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Jul 11, 2000WFTPD and WFTPD Pro 2.41 allows local users to cause a denial of service by executing the RENAME TO (RNTO) command before a RENAME FROM (RNFR) command.CVE-2000-0648 · Other software · Texas Imperial Software · reported by MITREMedium 5
WFTPD and WFTPD Pro 2.41 allows local users to cause a denial of service by executing the RENAME TO (RNTO) command before a RENAME FROM (RNFR) command.
- Product
- Wftpd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jul 8, 2000Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a ..CVE-2000-0640 · Other software · Steve Poulsen · reported by MITREHigh 7.5
Guild FTPd allows remote attackers to determine the existence of files outside the FTP root via a .. (dot dot) attack, which provides different error messages depending on whether the file exists or not.
- Product
- Guildftpd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comosvdb.org
Jul 7, 2000FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function CVE-2000-0574 · Other software · Openbsd · reported by MITREMedium 5
FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by set_proc_title), which allows remote attackers to cause a denial of service or execute arbitrary commands.
- Product
- Ftpd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.netbsd.orgarchives.neohapsis.com
Jul 7, 2000The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commanCVE-2000-0573 · Other software · HP · reported by MITREHigh 10
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to execute arbitrary commands via the SITE EXEC command.
- Product
- Hp-ux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.freebsd.orgftp.auscert.org.au
Jun 26, 2000The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.CVE-2000-0587 · Other software · Glftpd · reported by MITREHigh 10
The privpath directive in glftpd 1.18 allows remote attackers to bypass access restrictions for directories by using the file name completion capability.
- Product
- Glftpd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Jun 21, 2000Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a ..CVE-2000-0577 · Other software · Netscape · reported by MITREHigh 10
Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
- Product
- Professional Services Ftpserver
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Jun 16, 2000Dragon FTP server allows remote attackers to cause a denial of service via a long USER command.CVE-2000-0479 · Other software · Shadow OP Software · reported by MITREMedium 5
Dragon FTP server allows remote attackers to cause a denial of service via a long USER command.
- Product
- Dragon Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Jun 14, 2000GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands, which allows remote attackers to cause a denial of service, and loCVE-2000-0514 · Other software · MIT · reported by MITREHigh 10
GSSFTP FTP daemon in Kerberos 5 1.1.x does not properly restrict access to some FTP commands, which allows remote attackers to cause a denial of service, and local users to gain root privileges.
- Product
- Kerberos 5
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 13, 2000SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a ..CVE-2000-0565 · Other software · Mindstorm · reported by MITRELow 2.1
SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a .. (dot dot) attack.
- Product
- Smartftp Daemon
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comosvdb.org
May 28, 2000ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files oCVE-2000-0462 · Other software · Netbsd · reported by MITRELow 2.1
ftpd in NetBSD 1.4.2 does not properly parse entries in /etc/ftpchroot and does not chroot the specified users, which allows those users to access other files outside of their home directory.
- Product
- Netbsd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.netbsd.orgosvdb.org
Feb 24, 2000FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites.CVE-2000-0214 · Other software · Ftpx · reported by MITREMedium 4.6
FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites.
- Product
- FTP Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Feb 12, 2000Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinCVE-2000-0150 · Other software · Checkpoint · reported by MITREHigh 7.5
Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt.
- Product
- Firewall-1
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 4, 2000Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malCVE-2000-0129 · Computers, phones & browsers · Microsoft · reported by MITRELow 2.1
Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file.
- Product
- Windows 95
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Feb 1, 2000Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, and RNFR commands.CVE-2000-0133 · Other software · H. Nomura · reported by MITREHigh 10
Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, and RNFR commands.
- Product
- Tiny Ftpdaemon
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Feb 1, 2000Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.CVE-2000-0131 · Other software · Jgaa · reported by MITREMedium 5
Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.
- Product
- Warftpd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 6, 2000Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands.CVE-2000-0044 · Other software · Jgaa · reported by MITREHigh 10
Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands.
- Product
- Warftpd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jan 6, 2000CuteFTP uses weak encryption to store password information in its tree.dat file.CVE-2000-0084 · Other software · Globalscape · reported by MITREMedium 5
CuteFTP uses weak encryption to store password information in its tree.dat file.
- Product
- Cuteftp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Dec 31, 1999CascadeView TFTP server allows local users to gain privileges via a symlink attack.CVE-2000-0015 · Other software · Ascend · reported by MITREMedium 4.6
CascadeView TFTP server allows local users to gain privileges via a symlink attack.
- Product
- Cascadeview UX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Dec 31, 1999FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many passive (PASV) connections at the same tiCVE-1999-1148 · Computers, phones & browsers · Microsoft · reported by MITREMedium 5
FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many passive (PASV) connections at the same time.
- Product
- Internet Information Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.microsoft.comdocs.microsoft.com
Dec 31, 1999Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and possibly execute arbitrary commands, via aCVE-1999-1290 · Other software · Chris Matthee · reported by MITREMedium 5.1
Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and possibly execute arbitrary commands, via a long response string.
- Product
- Nftp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 31, 1999mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, which causes Apache to dump core.CVE-1999-1293 · Websites & servers · Apache · reported by MITREHigh 10
mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, which causes Apache to dump core.
- Product
- Http Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 31, 1999automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharactCVE-1999-1333 · Other software · Redhat · reported by MITREHigh 7.5
automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the names of files that are to be downloaded.
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 1999FTPPro allows local users to read sensitive information, which is stored in plain text.CVE-2000-0008 · Other software · 1st Choice Software · reported by MITRELow 2.1
FTPPro allows local users to read sensitive information, which is stored in plain text.
- Product
- Ftppro
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Dec 23, 1999glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.CVE-2000-0040 · Other software · Glftpd · reported by MITREHigh 10
glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.
- Product
- Glftpd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Dec 23, 1999glFtpD includes a default glftpd user account with a default password and a UID of 0.CVE-2000-0038 · Other software · Glftpd · reported by MITREHigh 7.5
glFtpD includes a default glftpd user account with a default password and a UID of 0.
- Product
- Glftpd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Dec 20, 1999wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does CVE-1999-0997 · Other software · Millenux Gmbh · reported by MITREHigh 7.5
wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.
- Product
- Anonftp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 13, 1999War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections.CVE-1999-1003 · Other software · Jgaa · reported by MITREMedium 5
War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections.
- Product
- Warftpd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Dec 1, 1999Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.CVE-1999-0838 · Other software · Deerfield · reported by MITREMedium 5
Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command.
- Product
- Serv-u Ftp-server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Nov 22, 1999Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via several lCVE-1999-1058 · Other software · Arcane Software · reported by MITREHigh 7.5
Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via several long CWD commands.
- Product
- Vermillion FTP Daemon
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 19, 1999ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privilegesCVE-1999-1475 · Other software · Proftpd Project · reported by MITREMedium 4.6
ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command.
- Product
- Proftpd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Nov 17, 1999Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user name or (2) password.CVE-1999-1519 · Other software · Gene6 · reported by MITREMedium 5
Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user name or (2) password.
- Product
- G6 FTP Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Nov 10, 1999Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service, and poCVE-1999-1539 · Other software · QPC Software · reported by MITREHigh 7.5
Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long (1) user name or (2) password.
- Product
- QVT NET
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 4, 1999Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port.CVE-1999-0843 · Network & remote access · Cisco · reported by MITREMedium 5
Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port.
- Product
- Router
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Oct 28, 1999Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.CVE-1999-0950 · Other software · Texas Imperial Software · reported by MITREHigh 10
Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.
- Product
- Wftpd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Oct 5, 1999Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp as a shared directory with insecure permissions, which allows local users to (1) send arbitrary files tCVE-1999-1345 · Other software · Auto FTP · reported by MITREMedium 4.6
Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp as a shared directory with insecure permissions, which allows local users to (1) send arbitrary files to the remote server by placing them in the directory, and (2) view files that are being transferred.
- Product
- Auto FTP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 5, 1999Auto_FTP.pl script in Auto_FTP 0.2 stores usernames and passwords in plaintext in the auto_ftp.conf configuration file.CVE-1999-1344 · Other software · Auto FTP · reported by MITREHigh 7.5
Auto_FTP.pl script in Auto_FTP 0.2 stores usernames and passwords in plaintext in the auto_ftp.conf configuration file.
- Product
- Auto FTP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 1, 1999Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.CVE-1999-0879 · Other software · Bsdi · reported by MITREHigh 10
Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.
- Product
- BSD OS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Oct 1, 1999Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.CVE-1999-0880 · Other software · Bsdi · reported by MITREMedium 5
Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.
- Product
- BSD OS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comexchange.xforce.ibmcloud.com
Sep 28, 1999Buffer overflow in AIX ftpd in the libc library.CVE-1999-0789 · Other software · IBM · reported by MITREHigh 10
Buffer overflow in AIX ftpd in the libc library.
- Product
- AIX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordciac.orgsecurityfocus.com
Sep 23, 1999IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.CVE-1999-0777 · Computers, phones & browsers · Microsoft · reported by MITREHigh 7.5
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.
- Product
- Commercial Internet System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsupport.microsoft.comsupport.microsoft.com
Sep 5, 1999gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the log window, or (2) in a log file.CVE-1999-1562 · Other software · Gftp · reported by MITREMedium 4.6
gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the log window, or (2) in a log file.
- Product
- FTP Client
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddebian.orgsecurityfocus.com
Aug 27, 1999Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directorieCVE-1999-0911 · Other software · Proftpd Project · reported by MITREHigh 10
Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.
- Product
- Proftpd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddebian.orgsecurityfocus.com
Aug 25, 1999Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from anothCVE-1999-1235 · Computers, phones & browsers · Microsoft · reported by MITREMedium 4.6
Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing ("shoulder surfing") another user to read the information from the status bar when the user moves the mouse over a link.
- Product
- Internet Explorer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordntbugtraq.ntadvice.compacketderm.cotse.com
Aug 22, 1999Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR.CVE-1999-0878 · Other software · Beroftpd · reported by MITREHigh 10
Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR.
- Product
- Beroftpd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Aug 3, 1999Buffer overflow in ToxSoft NextFTP client through CWD command.CVE-1999-0671 · Other software · Toxsoft · reported by MITREMedium 5.1
Buffer overflow in ToxSoft NextFTP client through CWD command.
- Product
- Nextftp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Aug 1, 1999FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which alloCVE-1999-1337 · Other software · Midnight Commander · reported by MITREMedium 4.6
FTP client in Midnight Commander (mc) before 4.5.11 stores usernames and passwords for visited sites in plaintext in the world-readable history file, which allows other local users to gain privileges.
- Product
- Midnight Commander
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 29, 1999WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privilegesCVE-1999-1078 · Other software · Ipswitch · reported by MITREHigh 7.5
WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain privileges.
- Product
- WS FTP Pro
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordntbugtraq.comsecurityfocus.com
Jul 1, 1999The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization.CVE-1999-0707 · Other software · HP · reported by MITREHigh 7.5
The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization.
- Product
- Visualize Conference FTP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordciac.orgsecurityfocus.com
May 17, 1999Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via long (1)CVE-1999-1510 · Other software · Bisonware · reported by MITREHigh 7.5
Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via long (1) USER, (2) LIST, or (3) CWD commands.
- Product
- Bisonware FTP Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infoexchange.xforce.ibmcloud.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.