cerberusftp kayıtları
cerberusftp üreticisine ait 10 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-276 Incorrect Default Permissions1
- CWE-278 Insecure Preserved Inherited Permissions1
- CWE-20 Improper Input Validation1
- CWE-352 Cross-Site Request Forgery (CSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
10 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
33İzleyin | CVE-2017-6367Kavram kanıtı | In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash.cerberusftp · ftp server · CWE-20 | Yüksek7,5 | — | %8,6 | 14 Mar 2017 |
32İzleyin | CVE-2020-5196İstismar yok | Cerberus FTP Server Enterprise Edition prior to versions 11.0.3 and 10.0.18 allows an authenticated attacker to create files, display hiddencerberusftp · ftp server · CWE-276 | Yüksek8,1 | — | %1,2 | 14 Oca 2020 |
29İzleyin | CVE-2026-6265İstismar yok | Local Privilege Escalation in Cerberus FTP Server =< 2025.4.2cerberusftp · ftp server · CWE-278 | Yüksek7,3 | — | %0,3 | 27 Nis 2026 |
27İzleyin | CVE-2012-2999İstismar yok | Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in Cerberus FTP Server before 5.0.5.0 allow remote attackerscerberusftp · ftp server · CWE-352 | Orta6,8 | — | %1,1 | 4 Eki 2012 |
25İzleyin | CVE-2019-25046Kavram kanıtı | The Web Client in Cerberus FTP Server Enterprise before 10.0.19 and 11.x before 11.0.4 allows XSS via an SVG document.cerberusftp · ftp server · CWE-79 | Orta6,1 | — | %1,7 | 10 Haz 2021 |
24İzleyin | CVE-2020-5195İstismar yok | Reflected XSS through an IMG element in Cerberus FTP Server prior to versions 11.0.1 and 10.0.17 allows a remote attacker to execute arbitracerberusftp · ftp server · CWE-79 | Orta6,1 | — | %1,2 | 13 Oca 2020 |
21İzleyin | CVE-2020-5194İstismar yok | The zip API endpoint in Cerberus FTP Server 8 allows an authenticated attacker without zip permission to use the zip functionality via an uncerberusftp · ftp server · CWE-639 | Orta5,4 | — | %0,6 | 14 Oca 2020 |
20İzleyin | CVE-2012-5301İstismar yok | The default configuration of Cerberus FTP Server before 5.0.4.0 supports the DES cipher for SSH sessions, which makes it easier for remote acerberusftp · ftp server · CWE-310 | Orta5,0 | — | %1,1 | 4 Eki 2012 |
17İzleyin | CVE-2012-6339İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow (1) remocerberusftp · ftp server · CWE-79 | Orta4,3 | — | %1,1 | 31 Ara 2012 |
16İzleyin | CVE-2004-2769İstismar yok | Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is encerberusftp · ftp server · CWE-264 | Orta4,0 | — | %1,5 | 2 Tem 2010 |
- CVE-2017-636733İzleyin
In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash.
YüksekCVSS 7,5Kavram kanıtıEPSS %8cerberusftp · ftp server14 Mar 2017
- CVE-2020-519632İzleyin
Cerberus FTP Server Enterprise Edition prior to versions 11.0.3 and 10.0.18 allows an authenticated attacker to create files, display hidden
YüksekCVSS 8,1İstismar yokEPSS %1cerberusftp · ftp server14 Oca 2020
- CVE-2026-626529İzleyin
Local Privilege Escalation in Cerberus FTP Server =< 2025.4.2
YüksekCVSS 7,3İstismar yokEPSS %0cerberusftp · ftp server27 Nis 2026
- CVE-2012-299927İzleyin
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in Cerberus FTP Server before 5.0.5.0 allow remote attackers
OrtaCVSS 6,8İstismar yokEPSS %1cerberusftp · ftp server4 Eki 2012
- CVE-2019-2504625İzleyin
The Web Client in Cerberus FTP Server Enterprise before 10.0.19 and 11.x before 11.0.4 allows XSS via an SVG document.
OrtaCVSS 6,1Kavram kanıtıEPSS %1cerberusftp · ftp server10 Haz 2021
- CVE-2020-519524İzleyin
Reflected XSS through an IMG element in Cerberus FTP Server prior to versions 11.0.1 and 10.0.17 allows a remote attacker to execute arbitra
OrtaCVSS 6,1İstismar yokEPSS %1cerberusftp · ftp server13 Oca 2020
- CVE-2020-519421İzleyin
The zip API endpoint in Cerberus FTP Server 8 allows an authenticated attacker without zip permission to use the zip functionality via an un
OrtaCVSS 5,4İstismar yokEPSS %0cerberusftp · ftp server14 Oca 2020
- CVE-2012-530120İzleyin
The default configuration of Cerberus FTP Server before 5.0.4.0 supports the DES cipher for SSH sessions, which makes it easier for remote a
OrtaCVSS 5,0İstismar yokEPSS %1cerberusftp · ftp server4 Eki 2012
- CVE-2012-633917İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow (1) remo
OrtaCVSS 4,3İstismar yokEPSS %1cerberusftp · ftp server31 Ara 2012
- CVE-2004-276916İzleyin
Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is en
OrtaCVSS 4,0İstismar yokEPSS %1cerberusftp · ftp server2 Tem 2010