Skip to content
Noroxi

BigAntSoft records

17 published records for vendor bigantsoft.

Researcher profile

Entered KEV
0 · 0%
Weaponized
4 · 23.5%
Pre-auth RCE
4
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

17 records
  • CVE-2008-1914
    62This week

    Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server in BigAnt Messenger 2.2 allows remote attackers to e

    CriticalCVSS 10.0WeaponizedEPSS 73%

    bigantsoft · bigant messengerApr 22, 2008

  • CVE-2009-4660
    59Plan

    Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary co

    CriticalCVSS 10.0WeaponizedEPSS 62%

    bigantsoft · bigant messengerMar 3, 2010

  • CVE-2012-6275
    54Plan

    Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impa

    CriticalCVSS 10.0WeaponizedEPSS 46%

    bigantsoft · bigant im message serverFeb 24, 2013

  • CVE-2025-0364
    40Plan

    BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    bigantsoft · bigant serverFeb 4, 2025

  • CVE-2022-23346
    35Monitor

    BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues.

    HighCVSS 8.8No exploitEPSS 1%

    bigantsoft · bigant serverMar 21, 2022

  • CVE-2021-43430
    35Monitor

    An Access Control vulnerability exists in BigAntSoft BigAnt office messenger 5.6 via im_webserver, which could let a malicious user upload P

    HighCVSS 8.8No exploitEPSS 1%

    bigantsoft · bigant office messenger 5Apr 7, 2022

  • CVE-2022-23349
    35Monitor

    BigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery (CSRF).

    HighCVSS 8.8No exploitEPSS 0%

    bigantsoft · bigant serverMar 21, 2022

  • CVE-2012-6274
    34Monitor

    BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary fi

    MediumCVSS 5.0WeaponizedEPSS 46%

    bigantsoft · bigant im message serverFeb 24, 2013

  • CVE-2022-23347
    34Monitor

    BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.

    HighCVSS 7.5Proof of conceptEPSS 13%

    bigantsoft · bigant serverMar 21, 2022

  • CVE-2022-23352
    30Monitor

    An issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service (DoS).

    HighCVSS 7.5No exploitEPSS 1%

    bigantsoft · bigant serverMar 21, 2022

  • CVE-2022-23345
    30Monitor

    BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control.

    HighCVSS 7.5No exploitEPSS 1%

    bigantsoft · bigant serverMar 21, 2022

  • CVE-2012-6273
    30Monitor

    SQL injection vulnerability in BigAntSoft BigAnt IM Message Server allows remote attackers to execute arbitrary SQL commands via an SHU (aka

    HighCVSS 7.5No exploitEPSS 1%

    bigantsoft · bigant im message serverFeb 24, 2013

  • CVE-2022-26281
    30Monitor

    BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue.

    HighCVSS 7.5No exploitEPSS 0%

    bigantsoft · bigant serverApr 4, 2022

  • CVE-2024-54761
    26Monitor

    BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter.

    MediumCVSS 6.3Proof of conceptEPSS 1%

    bigantsoft · bigant office messenger 5Jan 9, 2025

  • CVE-2022-23348
    22Monitor

    BigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password hashes.

    MediumCVSS 5.3Proof of conceptEPSS 3%

    bigantsoft · bigant serverMar 21, 2022

  • CVE-2022-23350
    21Monitor

    BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting (XSS) vulnerability.

    MediumCVSS 5.4No exploitEPSS 0%

    bigantsoft · bigant serverMar 21, 2022

  • CVE-2009-4661
    18Monitor

    Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial of service (applicati

    MediumCVSS 4.3Proof of conceptEPSS 2%

    bigantsoft · bigant serverMar 3, 2010