rathena records
6 published records for vendor rathena.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-122 Heap-based Buffer Overflow1
- CWE-416 Use After Free1
- CWE-707 Improper Neutralization1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2025-58447No exploit | rAthena has heap-based buffer overflow in login serverrathena · rathena · CWE-122 | Critical9.8 | — | 0.8% | Sep 9, 2025 |
39Monitor | CVE-2025-58448No exploit | rAthena has SQL Injection in PartyBooking component via `WorldName` parameter.rathena · rathena · CWE-89 | Critical9.8 | — | 0.3% | Sep 9, 2025 |
36Monitor | CVE-2025-58750No exploit | rAthena missing bound check in chclif_parse_moveCharSlotrathena · rathena · CWE-119 | Critical9.1 | — | 0.3% | Sep 9, 2025 |
30Monitor | CVE-2025-62170No exploit | rAthena map-server use-after-free vulnerability in RODEXrathena · rathena · CWE-416 | High7.5 | — | 0.3% | Oct 13, 2025 |
24Monitor | CVE-2022-4421No exploit | rAthena FluxCP Service Desk Image URL view.php cross site scriptingrathena · fluxcp · CWE-707 | Medium6.1 | — | 0.4% | Dec 12, 2022 |
24Monitor | CVE-2024-45799No exploit | Javascript Injection in Vending Info/Buyers Info Module in FluxCPrathena · fluxcp · CWE-79 | Medium6.1 | — | 0.2% | Sep 16, 2024 |
- CVE-2025-5844739Monitor
rAthena has heap-based buffer overflow in login server
CriticalCVSS 9.8No exploitEPSS 0%rathena · rathenaSep 9, 2025
- CVE-2025-5844839Monitor
rAthena has SQL Injection in PartyBooking component via `WorldName` parameter.
CriticalCVSS 9.8No exploitEPSS 0%rathena · rathenaSep 9, 2025
- CVE-2025-5875036Monitor
rAthena missing bound check in chclif_parse_moveCharSlot
CriticalCVSS 9.1No exploitEPSS 0%rathena · rathenaSep 9, 2025
- CVE-2025-6217030Monitor
rAthena map-server use-after-free vulnerability in RODEX
HighCVSS 7.5No exploitEPSS 0%rathena · rathenaOct 13, 2025
- CVE-2022-442124Monitor
rAthena FluxCP Service Desk Image URL view.php cross site scripting
MediumCVSS 6.1No exploitEPSS 0%rathena · fluxcpDec 12, 2022
- CVE-2024-4579924Monitor
Javascript Injection in Vending Info/Buyers Info Module in FluxCP
MediumCVSS 6.1No exploitEPSS 0%rathena · fluxcpSep 16, 2024