Vulnerabilities

Filters

2 selected

23 records

Sort

Vendor: Flexense Component: Syncbreeze Clear all filters

TI-2020-19235 CVE-2020-37100 · GHSA-j79x-hc4h-rfv9

Sync Breeze Enterprise 12.4.18 - Unquoted Service Path

HIGH 72

Sync Breeze Enterprise 12.4.18 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privileges.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00222 Published 2026-02-03 No fix listed CWE-428

TI-2025-37310 CVE-2025-59900 · GHSA-fcg3-c6jm-9qxr

Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server

LOW 23

Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00197 Published 2026-01-28 No fix listed CWE-79

TI-2025-37309 CVE-2025-59899 · GHSA-cg8j-jfqg-q55w

Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server

LOW 23

Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00197 Published 2026-01-28 No fix listed CWE-79

TI-2025-37308 CVE-2025-59898 · GHSA-45v9-p764-4x3m

Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server

LOW 23

Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00197 Published 2026-01-28 No fix listed CWE-79

TI-2025-37307 CVE-2025-59897 · GHSA-jfcj-mjhj-m88q

Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server

LOW 23

Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00197 Published 2026-01-28 No fix listed CWE-79

TI-2025-37306 CVE-2025-59896 · GHSA-q3p7-5h3x-778g

Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server

LOW 23

Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00197 Published 2026-01-28 No fix listed CWE-79

TI-2025-37305 CVE-2025-59895 · GHSA-xgm3-v5hc-wc6j

Remote denial-of-service (DoS) vulnerability in Sync Breeze Enterprise Server

MEDIUM 42

Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a remote denial-of-service (DoS) vulnerability in the configuration restore functionality.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00399 Published 2026-01-28 No fix listed CWE-20

TI-2025-37304 CVE-2025-59894 · GHSA-g75h-mgx2-c5rq

Cross-site request forgery in Flexense Sync Breeze Enterprise Server

LOW 38

Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18.

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.00151 Published 2026-01-28 No fix listed CWE-352

TI-2025-37303 CVE-2025-59893 · GHSA-3376-jw3x-f6j6

Cross-site request forgery in Flexense Sync Breeze Enterprise Server

LOW 38

Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18.

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.00151 Published 2026-01-28 No fix listed CWE-352

TI-2025-37302 CVE-2025-59892 · GHSA-75rp-pqq4-fpv7

Cross-site request forgery in Flexense Sync Breeze Enterprise Server

LOW 38

Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18.

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.00151 Published 2026-01-28 No fix listed CWE-352

TI-2025-37301 CVE-2025-59891 · GHSA-33r4-r5rc-phcf

Cross-site request forgery in Flexense Sync Breeze Enterprise Server

LOW 38

Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18.

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.00151 Published 2026-01-28 No fix listed CWE-352

TI-2020-19081 CVE-2020-36946 · GHSA-xmhr-f2x4-rvcv

SyncBreeze 10.0.28 - 'login' Denial of Service

HIGH 77

SyncBreeze 10.0.28 contains a denial of service vulnerability in the login endpoint that allows remote attackers to crash the service.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00743 Published 2026-01-27 No fix listed CWE-770

TI-2018-07456 CVE-2018-10563 · GHSA-vj42-xr4f-h37p

An XSS in Flexense SyncBreeze affects all versions (tested from SyncBreeze Enterprise from v10.1 to v10.7).

LOW 28

An XSS in Flexense SyncBreeze affects all versions (tested from SyncBreeze Enterprise from v10.1 to v10.7).

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00681 Published 2018-05-02 No fix listed CWE-79

TI-2018-05835 CVE-2018-8065 · GHSA-f79v-qgfc-86w3

An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24.

HIGH 72

An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.75875 Published 2018-03-12 No fix listed CWE-20

TI-2017-13210 CVE-2017-17996 · GHSA-8cqj-7fcx-j892

A buffer overflow vulnerability in "Add command" functionality exists in Flexense…

MEDIUM 46

A buffer overflow vulnerability in "Add command" functionality exists in Flexense SyncBreeze Enterprise <= 10.3.14.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.05078 Published 2018-02-06 No fix listed CWE-119

TI-2018-04816 CVE-2018-6537 · GHSA-5826-q2pf-w9mh

A buffer overflow vulnerability in the control protocol of Flexense SyncBreeze Enterprise…

MEDIUM 49

A buffer overflow vulnerability in the control protocol of Flexense SyncBreeze Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending a crafted packet to TCP port 9121.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04182 Published 2018-02-02 No fix listed CWE-119

TI-2017-09973 CVE-2017-13696 · GHSA-pw6x-q52c-69f8

A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise…

HIGH 82

A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze Enterprise 9.9.16, and Disk Pulse Enterprise 9.9.16 where an attacker can craft a…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.78657 Published 2018-01-24 No fix listed CWE-119

TI-2017-11450 CVE-2017-15664 · GHSA-fj5q-23v3-v8r6

In Flexense Sync Breeze Enterprise v10.1.16, the Control Protocol suffers from a denial…

MEDIUM 45

In Flexense Sync Breeze Enterprise v10.1.16, the Control Protocol suffers from a denial of service vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.09145 Published 2018-01-10 No fix listed CWE-358

TI-2017-12540 CVE-2017-17088 · GHSA-gg5r-fhg3-cmhj

The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial…

MEDIUM 43

The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial of Service vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.06984 Published 2017-12-19 No fix listed CWE-119

TI-2017-12551 CVE-2017-17099 · GHSA-grh2-3qxf-46m9

There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP…

MEDIUM 48

There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.11831 Published 2017-12-03 No fix listed CWE-119

TI-2017-11681 CVE-2017-15950 · GHSA-ghh7-v9vx-hcv9

Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that…

MEDIUM 42

Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.05507 Published 2017-10-31 No fix listed CWE-119

TI-2017-10999 CVE-2017-14980 · GHSA-725r-cwf2-8w4q

Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have…

MEDIUM 62

Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.22312 Published 2017-10-09 No fix listed CWE-119

TI-2017-04982 CVE-2017-7310 · GHSA-4cmq-9jfx-jxmh

A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter…

HIGH 66

A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Search before 10.6 allo…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.53651 Published 2017-03-29 No fix listed CWE-119