rhinosoft records
7 published records for vendor rhinosoft.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
46Plan | CVE-2009-4873Proof of concept | Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of servrhinosoft · serv-u · CWE-119 | Critical10.0 | — | 20.5% | May 26, 2010 |
37Monitor | CVE-2010-4154No exploit | Directory traversal vulnerability in Rhino Software, Inc.rhinosoft · ftp voyager · CWE-22 | Critical9.3 | — | 1.6% | Nov 3, 2010 |
32Monitor | CVE-2007-1079Proof of concept | Stack-based buffer overflow in Rhino Software, Inc.rhinosoft · ftp voyager | High7.8 | — | 3.0% | Feb 22, 2007 |
31Monitor | CVE-2001-1103No exploit | FTP Voyager ActiveX control before 8.0, when it is marked as safe for scripting (the default) or if allowed by the IObjectSafety interface, rhinosoft · ftp voyager | High7.5 | — | 2.0% | Mar 3, 2001 |
21Monitor | CVE-2004-1691Proof of concept | The Web Server in DNS4Me 3.0.0.4 allows remote attackers to cause a denial of service (CPU consumption and crash) via a large amount of datarhinosoft · dns4me | Medium5.0 | — | 3.5% | Sep 18, 2004 |
18Monitor | CVE-2004-1939Proof of concept | Cross-site scripting (XSS) vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or HTML via double encorhinosoft · zaep antispam | Medium4.3 | — | 1.7% | Apr 14, 2004 |
17Monitor | CVE-2004-1690No exploit | Cross-site scripting (XSS) vulnerability in the Web Server in DNS4Me 3.0.0.4 allows remote attackers to execute arbitrary web script or HTMLrhinosoft · dns4me | Medium4.3 | — | 1.3% | Sep 18, 2004 |
- CVE-2009-487346Plan
Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of serv
CriticalCVSS 10.0Proof of conceptEPSS 20%rhinosoft · serv-uMay 26, 2010
- CVE-2010-415437Monitor
Directory traversal vulnerability in Rhino Software, Inc.
CriticalCVSS 9.3No exploitEPSS 1%rhinosoft · ftp voyagerNov 3, 2010
- CVE-2007-107932Monitor
Stack-based buffer overflow in Rhino Software, Inc.
HighCVSS 7.8Proof of conceptEPSS 3%rhinosoft · ftp voyagerFeb 22, 2007
- CVE-2001-110331Monitor
FTP Voyager ActiveX control before 8.0, when it is marked as safe for scripting (the default) or if allowed by the IObjectSafety interface,
HighCVSS 7.5No exploitEPSS 2%rhinosoft · ftp voyagerMar 3, 2001
- CVE-2004-169121Monitor
The Web Server in DNS4Me 3.0.0.4 allows remote attackers to cause a denial of service (CPU consumption and crash) via a large amount of data
MediumCVSS 5.0Proof of conceptEPSS 3%rhinosoft · dns4meSep 18, 2004
- CVE-2004-193918Monitor
Cross-site scripting (XSS) vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or HTML via double enco
MediumCVSS 4.3Proof of conceptEPSS 1%rhinosoft · zaep antispamApr 14, 2004
- CVE-2004-169017Monitor
Cross-site scripting (XSS) vulnerability in the Web Server in DNS4Me 3.0.0.4 allows remote attackers to execute arbitrary web script or HTML
MediumCVSS 4.3No exploitEPSS 1%rhinosoft · dns4meSep 18, 2004