Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Orbitdownloader Component: Orbit Downloader Clear all filters
TI-2010-02016 CVE-2010-2104 · GHSA-jcgx-f9p7-q72g

Directory traversal vulnerability in Orbit Downloader 3.0.0.4 and 3.0.0.5 allows…

Priority LOW 25

Directory traversal vulnerability in Orbit Downloader 3.0.0.4 and 3.0.0.5 allows user-assisted remote attackers to write arbitrary files via a metalink file containing directory traversal sequences in the name attribute…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02956 Published 2010-05-27 No fix listed CWE-22
TI-2009-00176 CVE-2009-0187 · GHSA-wfcr-jgmv-mvh9

Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other…

Priority HIGH 68

Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name, which is not prop…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.39984 Published 2009-02-26 No fix listed CWE-119