Rhinosoft

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Rhinosoft records in CISA KEV

No Rhinosoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ftp Voyager 3 records MEDIUM Dns4me 2 records LOW Serv-u 1 record MEDIUM Zaep Antispam 1 record LOW

Records

7 records

TI-2009-04629 CVE-2009-4873 · GHSA-9pqr-jpg7-8j32

Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client…

MEDIUM 62

Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of service (server crash) or execute arbitrary code via a long Session cookie.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.20553 Published 2010-05-26 No fix listed CWE-119

TI-2010-03909 CVE-2010-4154 · GHSA-228f-32pf-6cc9

Directory traversal vulnerability in Rhino Software, Inc.

MEDIUM 43

Directory traversal vulnerability in Rhino Software, Inc.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.01648 Published 2010-11-03 No fix listed CWE-22

TI-2007-01047 CVE-2007-1079 · GHSA-2m99-7562-fw7j

Stack-based buffer overflow in Rhino Software, Inc.

MEDIUM 40

Stack-based buffer overflow in Rhino Software, Inc.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.03062 Published 2007-02-22 No fix listed

TI-2001-01058 CVE-2001-1103 · GHSA-w4p8-hvvv-34gp

FTP Voyager ActiveX control before 8.0, when it is marked as safe for scripting (the…

LOW 37

FTP Voyager ActiveX control before 8.0, when it is marked as safe for scripting (the default) or if allowed by the IObjectSafety interface, allows remote attackers to execute arbitrary commands.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02059 Published 2004-09-01 No fix listed

TI-2004-01567 CVE-2004-1691 · GHSA-c8hp-7fgw-gpw8

The Web Server in DNS4Me 3.0.0.4 allows remote attackers to cause a denial of service…

LOW 29

The Web Server in DNS4Me 3.0.0.4 allows remote attackers to cause a denial of service (CPU consumption and crash) via a large amount of data.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03578 Published 2005-02-20 No fix listed

TI-2004-01812 CVE-2004-1939 · GHSA-vv4x-wgcc-mrm8

Cross-site scripting (XSS) vulnerability in Zaep AntiSpam 2.0 allows remote attackers to…

LOW 24

Cross-site scripting (XSS) vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or HTML via double encoded slashes (%252F) in the key parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01739 Published 2005-05-10 No fix listed

TI-2004-01566 CVE-2004-1690 · GHSA-r75w-3v4r-7qm9

Cross-site scripting (XSS) vulnerability in the Web Server in DNS4Me 3.0.0.4 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in the Web Server in DNS4Me 3.0.0.4 allows remote attackers to execute arbitrary web script or HTML via the URL.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01382 Published 2005-02-20 No fix listed

Open these records in search →

Critical	2
High	2
Medium	3
Low	0
No CVSS	0