Skip to content
Noroxi

hfs records

6 published records for vendor hfs.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    6 records
    • CVE-2008-0405
      41Plan

      Multiple directory traversal vulnerabilities in HTTP File Server (HFS) before 2.2c, when account names are used as log filenames, allow remo

      CriticalCVSS 10.0No exploitEPSS 3%

      hfs · http file serverJan 28, 2008

    • CVE-2008-0408
      26Monitor

      HTTP File Server (HFS) before 2.2c allows remote attackers to append arbitrary text to the log file by using the base64 representation of th

      MediumCVSS 6.4No exploitEPSS 1%

      hfs · http file serverJan 28, 2008

    • CVE-2008-0406
      21Monitor

      HTTP File Server (HFS) before 2.2c, when account names are used as log filenames, allows remote attackers to cause a denial of service (daem

      MediumCVSS 5.0Proof of conceptEPSS 3%

      hfs · http file serverJan 28, 2008

    • CVE-2008-0410
      21Monitor

      HTTP File Server (HFS) before 2.2c allows remote attackers to obtain configuration and usage details by using an id element such as <id>%ver

      MediumCVSS 5.0No exploitEPSS 1%

      hfs · http file serverJan 28, 2008

    • CVE-2008-0407
      20Monitor

      HTTP File Server (HFS) before 2.2c tags HTTP request log entries with the username sent during HTTP Basic Authentication, regardless of whet

      MediumCVSS 5.0No exploitEPSS 1%

      hfs · http file serverJan 28, 2008

    • CVE-2008-0409
      17Monitor

      Cross-site scripting (XSS) vulnerability in HTTP File Server (HFS) before 2.2c allows remote attackers to inject arbitrary web script or HTM

      MediumCVSS 4.3No exploitEPSS 1%

      hfs · http file serverJan 28, 2008