Rumpus

Records29All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Rumpus records in CISA KEV

No Rumpus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Rumpus 21 records MEDIUM Rumpus Ftp 8 records LOW

Records

21 records in Rumpus · all components

TI-2025-34746 CVE-2025-55055 · GHSA-r88h-r3pw-jxv8

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

MEDIUM 50

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00819 Published 2025-11-17 No fix listed CWE-78

TI-2019-13973 CVE-2019-19368 · GHSA-8f5p-qmw7-gmq2

A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File…

MEDIUM 49

A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.25889 Published 2019-12-16 No fix listed CWE-79

TI-2008-06766 CVE-2008-7078 · GHSA-p7mx-j9j5-hv76

Multiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a…

MEDIUM 49

Multiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a denial of service (segmentation fault) via a long HTTP verb in the HTTP component; and allow remote authenticated users to execute ar…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.07139 Published 2009-08-25 No fix listed CWE-119

TI-2020-16710 CVE-2020-27575 · GHSA-7993-8pv5-9hpg

Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability.

MEDIUM 44

Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03075 Published 2021-03-08 No fix listed CWE-78

TI-2025-34749 CVE-2025-55058 · GHSA-hq63-j9w2-7wwh

CWE-20 Improper Input Validation

MEDIUM 42

CWE-20 Improper Input Validation

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00277 Published 2025-11-17 No fix listed CWE-20

TI-2022-22910 CVE-2022-46367 · GHSA-q4gj-rcjg-xcwr

Cross-site request forgery in Rumpus FTP server

MEDIUM 40

Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation vulnerability that may allow privilege escalation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00271 Published 2023-01-12 No fix listed CWE-352

TI-2020-16709 CVE-2020-27574 · GHSA-j9wp-3gcm-78qq

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF).

LOW 39

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00758 Published 2021-03-08 No fix listed CWE-352

TI-2019-14161 CVE-2019-19659 · GHSA-95hj-vv2p-554x

A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of…

LOW 39

A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0049 Published 2020-02-10 No fix listed CWE-352

TI-2022-22913 CVE-2022-46370 · GHSA-6rqp-hf8j-7x29

Rumpus - FTP server Improper Token Verification

LOW 38

Rumpus - FTP server version 9.0.7.1 Improper Token Verification– vulnerability may allow bypassing identity verification.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00231 Published 2023-01-12 No fix listed CWE-345

TI-2022-22911 CVE-2022-46368 · GHSA-p528-mrgw-3q8p

Rumpus - FTP server Cross-site request forgery (CSRF) – Create user

LOW 38

Rumpus - FTP server version 9.0.7.1 Cross-site request forgery (CSRF) – vulnerability may allow unauthorized action on behalf of authenticated users.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00271 Published 2023-01-12 No fix listed CWE-352

TI-2025-34748 CVE-2025-55057 · GHSA-v59q-3486-qmpm

Multiple CWE-352 Cross-Site Request Forgery (CSRF)

LOW 37

Multiple CWE-352 Cross-Site Request Forgery (CSRF)

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00162 Published 2025-11-17 No fix listed CWE-352

TI-2022-22912 CVE-2022-46369 · GHSA-574w-g6v4-fj73

Rumpus - FTP server Persistent cross-site scripting (PXSS) – Unspecified vector

LOW 32

Rumpus - FTP server version 9.0.7.1 Persistent cross-site scripting (PXSS) – vulnerability may allow inserting scripts into unspecified input fields.

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00439 Published 2023-01-12 No fix listed CWE-79

TI-2020-10125 CVE-2020-12737 · GHSA-8qq4-4mf9-45qp

An issue was discovered in Maxum Rumpus before 8.2.12 on macOS.

LOW 31

An issue was discovered in Maxum Rumpus before 8.2.12 on macOS.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01135 Published 2020-05-08 No fix listed CWE-22

TI-2022-18569 CVE-2022-39187 · GHSA-jw92-fcgv-875g

Rumpus - FTP server Reflected cross-site scripting (RXSS)

LOW 30

Rumpus - FTP server version 9.0.7.1 has a Reflected cross-site scripting (RXSS) vulnerability through unspecified vectors.

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00431 Published 2023-01-12 No fix listed CWE-79

TI-2020-06833 CVE-2020-8514 · GHSA-6q2h-wxjv-g7g6

An issue was discovered in Rumpus 8.2.10 on macOS.

LOW 29

An issue was discovered in Rumpus 8.2.10 on macOS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00812 Published 2020-02-02 No fix listed CWE-79

TI-2019-14167 CVE-2019-19665 · GHSA-52x3-94cg-xpgf

A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1.

LOW 29

A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00435 Published 2020-02-10 No fix listed CWE-352

TI-2019-14165 CVE-2019-19663 · GHSA-p4r6-hcgx-wj4h

A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP…

LOW 29

A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00435 Published 2020-02-10 No fix listed CWE-352

TI-2019-14162 CVE-2019-19660 · GHSA-prgj-fx3q-8ffq

A CSRF vulnerability exists in the Web File Manager's Network Setting functionality of…

LOW 29

A CSRF vulnerability exists in the Web File Manager's Network Setting functionality of Rumpus FTP Server 8.2.9.1.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00435 Published 2020-02-10 No fix listed CWE-352

TI-2025-34750 CVE-2025-55059 · GHSA-j4x8-5rjr-hgpc

CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

LOW 26

CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00188 Published 2025-11-17 No fix listed CWE-79

TI-2025-34747 CVE-2025-55056 · GHSA-6r2h-258f-w4jp

Multiple CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

LOW 26

Multiple CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00188 Published 2025-11-17 No fix listed CWE-79

TI-2020-16711 CVE-2020-27576 · GHSA-f895-2cv4-3f88

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting (XSS).

LOW 25

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00564 Published 2021-03-08 No fix listed CWE-79

Open these records in search →