Deerfield

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Deerfield records in CISA KEV

No Deerfield vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Visnetic Mail Server 6 records MEDIUM Visnetic Website 3 records LOW Mdaemon 2 records LOW D2gfx 1 record LOW Ftp Serv-u 1 record LOW Serv-u Ftp-server 1 record LOW Website Pro 1 record LOW

Records

3 records in Visnetic Website · all components

TI-2003-00429 CVE-2003-0456 · GHSA-v54v-27r8-vpr7

VisNetic WebSite 3.5 allows remote attackers to obtain the full pathname of the server…

LOW 28

VisNetic WebSite 3.5 allows remote attackers to obtain the full pathname of the server via a request containing a folder that does not exist, which leaks the pathname in an error message, as demonstrated using _vti_bin/f…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02762 Published 2003-07-15 No fix listed CWE-200

TI-2002-02153 CVE-2002-2241 · GHSA-fvgq-vmrp-gcc4

Buffer overflow in httpd32.exe in Deerfield VisNetic WebSite before 3.5.15 allows remote…

LOW 26

Buffer overflow in httpd32.exe in Deerfield VisNetic WebSite before 3.5.15 allows remote attackers to cause a denial of service (crash) via a long HTTP OPTIONS request.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01552 Published 2007-10-14 No fix listed CWE-399

TI-2002-02158 CVE-2002-2246 · GHSA-xvf5-q2pw-vpcx

Cross-site scripting (XSS) vulnerability in VisNetic Website before 3.5.15 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in VisNetic Website before 3.5.15 allows remote attackers to inject arbitrary web script or HTML via the HTTP referer header (HTTP_REFERER) to a non-existent page, which is inject…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01499 Published 2007-10-14 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	14
Low	0
No CVSS	0