Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Pi-soft records in CISA KEVNo Pi-soft vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 38
Pi-Soft SpoonFTP 1.1 and earlier allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0245 · Published 2002-06-25 · No fix listed
Priority LOW 38
Buffer overflow in SpoonFTP 1.0.0.12 allows remote attackers to execute arbitrary code via a long argument to the commands (1) CWD or (2) LIST.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02485 · Published 2001-10-12 · No fix listed CWE-284
Priority LOW 37
Directory traversal vulnerability in SpoonFTP 1.1 allows local and sometimes remote attackers to access files outside of the FTP root via a ...
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02044 · Published 2002-03-09 · No fix listed
Open these records in search →