TI-2012-05483 CVE-2012-10060 · GHSA-74gq-wvgf-56v7
Sysax Multi Server < 5.55 SSH Username Buffer Overflow
Priority HIGH 81
Sysax Multi Server versions prior to 5.55 contain a stack-based buffer overflow in its SSH service.
Sysax
Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Sysax records in CISA KEVNo Sysax vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
12 records
TI-2013-06205 CVE-2013-10065 · GHSA-r9wj-gm7p-2529
Sysax Multi-Server <= 6.10 SSHD Key Exchange DoS
Priority HIGH 77
A denial-of-service vulnerability exists in Sysax Multi-Server version 6.10 via its SSH daemon.
TI-2024-35807 CVE-2024-53458 · GHSA-6mpm-xvfm-qh84
Sysax Multi Server 6.99 is vulnerable to a denial of service (DoS) condition when…
Priority HIGH 72
Sysax Multi Server 6.99 is vulnerable to a denial of service (DoS) condition when processing specially crafted SSH packets.
TI-2012-05248 CVE-2012-6530 · GHSA-9xxp-3fh9-pr6j
Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled…
Priority MEDIUM 61
Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users with the create folder permission to execute arbitrary code via a crafted request.
TI-2024-35808 CVE-2024-53459 · GHSA-w2w8-wf8j-grh4
Sysax Multi Server 6.99 is vulnerable to Cross Site Scripting (XSS) via the /scgi?sid parameter.
Priority MEDIUM 60
Sysax Multi Server 6.99 is vulnerable to Cross Site Scripting (XSS) via the /scgi?sid parameter.
TI-2023-30611 CVE-2023-54337 · GHSA-p8c7-9h6j-9wmg
Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)
Priority MEDIUM 56
Sysax Multi Server 6.95 contains a denial of service vulnerability in the administrative password field that allows attackers to crash the application.
TI-2009-04546 CVE-2009-4790 · GHSA-j249-2v56-gw58
Multiple directory traversal vulnerabilities in Sysax Multi Server 4.5 allow remote…
Priority MEDIUM 45
Multiple directory traversal vulnerabilities in Sysax Multi Server 4.5 allow remote authenticated users to read or modify arbitrary files via crafted FTP commands.
TI-2020-10367 CVE-2020-13229 · GHSA-55r9-f432-qw9j
An issue was discovered in Sysax Multi Server 6.90.
Priority MEDIUM 41
An issue was discovered in Sysax Multi Server 6.90.
TI-2020-10366 CVE-2020-13228 · GHSA-2p9w-9f6v-m3cp
An issue was discovered in Sysax Multi Server 6.90.
Priority LOW 33
An issue was discovered in Sysax Multi Server 6.90.
TI-2020-14600 CVE-2020-23574 · GHSA-4vv3-wjvp-xprx
When uploading a file in Sysax Multi Server 6.90, an authenticated user can modify the…
Priority LOW 31
When uploading a file in Sysax Multi Server 6.90, an authenticated user can modify the filename="" parameter in the uploadfile_name1.htm form to a length of 368 or more bytes.
TI-2020-10365 CVE-2020-13227 · GHSA-p3pr-hfwc-v329
An issue was discovered in Sysax Multi Server 6.90.
Priority LOW 28
An issue was discovered in Sysax Multi Server 6.90.
TI-2009-04556 CVE-2009-4800 · GHSA-rww5-972v-w9xq
Directory traversal vulnerability in Sysax Multi Server 4.3 and 4.5 allows remote…
Priority LOW 23
Directory traversal vulnerability in Sysax Multi Server 4.3 and 4.5 allows remote authenticated users to delete arbitrary files via a ..// (dot dot slash slash) in a DELE command.