Skip to content
Noroxi

Cerberus records

14 published records for vendor cerberus.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

14 records
  • CVE-2017-6880
    43Plan

    Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspeci

    CriticalCVSS 9.8Proof of conceptEPSS 14%

    cerberus · cerberus ftp serverMar 17, 2017

  • CVE-2005-4427
    31Monitor

    Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via the (1) file_id par

    HighCVSS 7.5Proof of conceptEPSS 3%

    cerberus · cerberus helpdeskDec 20, 2005

  • CVE-2006-4539
    31Monitor

    (1) includes/widgets/module_company_tickets.php and (2) includes/widgets/module_track_tickets.php Client Support Center in Cerberus Helpdesk

    HighCVSS 7.5No exploitEPSS 2%

    cerberus · cerberus helpdeskSep 5, 2006

  • CVE-2024-5052
    30Monitor

    Resource consumption vulnerability in Cerberus FTP Enterprise

    HighCVSS 7.5No exploitEPSS 0%

    cerberus ftp enterprise · cerberus ftp enterpriseMay 17, 2024

  • CVE-2006-6366
    28Monitor

    Cross-site scripting (XSS) vulnerability in includes/elements/spellcheck/spellwin.php in Cerberus Helpdesk 0.97.3, 2.0 through 2.7, 3.2.1, a

    MediumCVSS 6.8Proof of conceptEPSS 2%

    cerberus · helpdeskDec 7, 2006

  • CVE-2006-5428
    21Monitor

    rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a display_get_requesters operation, which allows remote attacke

    MediumCVSS 5.0Proof of conceptEPSS 3%

    cerberus · cerberus helpdeskOct 20, 2006

  • CVE-2005-3502
    20Monitor

    attachment_send.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified file_id param

    MediumCVSS 5.0No exploitEPSS 2%

    cerberus · cerberus helpdeskNov 5, 2005

  • CVE-2005-1963
    20Monitor

    Cerberus Helpdesk 0.97.3 allows remote attackers to obtain sensitive information via certain requests to (1) reports.php, (2) knowledgebase.

    MediumCVSS 5.0No exploitEPSS 2%

    cerberus · cerberus helpdeskJun 16, 2005

  • CVE-2008-6440
    20Monitor

    Cerberus Helpdesk before 4.0 (Build 600) allows remote attackers to obtain sensitive information via direct requests for "controllers ...

    MediumCVSS 5.0No exploitEPSS 1%

    cerberus · cerberus helpdeskMar 6, 2009

  • CVE-2006-0509
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbi

    MediumCVSS 4.3Proof of conceptEPSS 2%

    cerberus · cerberus helpdeskFeb 1, 2006

  • CVE-2005-4428
    17Monitor

    Cross-site scripting (XSS) vulnerability in index.php in Cerberus Helpdesk allows remote attackers to inject arbitrary web script or HTML vi

    MediumCVSS 4.3No exploitEPSS 1%

    cerberus · cerberus helpdeskDec 20, 2005

  • CVE-2005-1962
    17Monitor

    Cross-site scripting (XSS) vulnerability in Cerberus Helpdesk 0.97.3 allows remote attackers to inject arbitrary web script or HTML via the

    MediumCVSS 4.3No exploitEPSS 1%

    cerberus · cerberus helpdeskJun 16, 2005

  • CVE-2007-5930
    17Monitor

    Cross-site scripting (XSS) vulnerability in the web interface in Cerberus FTP Server before 2.46 allows remote attackers to inject arbitrary

    MediumCVSS 4.3No exploitEPSS 1%

    cerberus · ftp serverNov 10, 2007

  • CVE-2003-1476
    8Monitor

    Cerberus FTP Server 2.1 stores usernames and passwords in plaintext, which could allow local users to gain access.

    LowCVSS 2.1No exploitEPSS 0%

    cerberus · ftp serverDec 31, 2003