Vulnerabilities

TI-2025-00296 CVE-2025-0364 · GHSA-cmgj-xph9-cc49

BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE

HIGH 82

BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0193 Published 2025-02-04 No fix listed CWE-288

TI-2024-36657 CVE-2024-54761 · GHSA-2wf3-32wx-c338

BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter.

MEDIUM 61

BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.01768 Published 2025-01-09 No fix listed CWE-89

TI-2021-19362 CVE-2021-43430 · GHSA-xw8x-6f24-54jx

An Access Control vulnerability exists in BigAntSoft BigAnt office messenger 5.6 via…

MEDIUM 40

An Access Control vulnerability exists in BigAntSoft BigAnt office messenger 5.6 via im_webserver, which could let a malicious user upload PHP Trojan files.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01145 Published 2022-04-07 No fix listed CWE-434

TI-2022-09673 CVE-2022-26281 · GHSA-m2fc-hwv4-8747

BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue.

LOW 35

BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00949 Published 2022-04-05 No fix listed CWE-311

TI-2022-07452 CVE-2022-23345 · GHSA-qvpm-g7wj-8g8g

BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control.

LOW 36

BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01554 Published 2022-03-21 No fix listed CWE-306

TI-2022-07453 CVE-2022-23346 · GHSA-6xx9-mf64-2gc5

BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues.

MEDIUM 41

BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01404 Published 2022-03-21 No fix listed CWE-434

TI-2022-07458 CVE-2022-23352 · GHSA-2gg3-23vh-j2pg

An issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service (DoS).

LOW 36

An issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service (DoS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01607 Published 2022-03-21 No fix listed CWE-835

TI-2022-07455 CVE-2022-23348 · GHSA-cxpw-9682-4rmh

BigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password hashes.

LOW 30

BigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password hashes.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03273 Published 2022-03-21 No fix listed CWE-916

TI-2022-07457 CVE-2022-23350 · GHSA-m2xp-9p4f-fp5r

BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting (XSS) vulnerability.

LOW 25

BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00607 Published 2022-03-21 No fix listed CWE-79

TI-2022-07456 CVE-2022-23349 · GHSA-c7hm-9h34-5g4x

BigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery (CSRF).

LOW 39

BigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery (CSRF).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00652 Published 2022-03-21 No fix listed CWE-352

TI-2022-07454 CVE-2022-23347 · GHSA-65p8-cv89-24c7

BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.

MEDIUM 48

BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.13483 Published 2022-03-21 No fix listed CWE-22

TI-2012-05120 CVE-2012-6275 · GHSA-8jm2-5j3f-p7pq

Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server…

HIGH 73

Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via (1) the filename header in an SCH request or (2) the userid component in…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.46498 Published 2013-02-24 No fix listed CWE-119

TI-2012-05119 CVE-2012-6274 · GHSA-cwq6-rvjc-59gf

BigAntSoft BigAnt IM Message Server does not require authentication for file uploading…

MEDIUM 53

BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.46868 Published 2013-02-24 No fix listed CWE-287

TI-2012-05118 CVE-2012-6273 · GHSA-fxr3-4p43-fvmw

SQL injection vulnerability in BigAntSoft BigAnt IM Message Server allows remote…

LOW 35

SQL injection vulnerability in BigAntSoft BigAnt IM Message Server allows remote attackers to execute arbitrary SQL commands via an SHU (aka search user) request.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0126 Published 2013-02-24 No fix listed CWE-89

TI-2009-04417 CVE-2009-4661 · GHSA-3xr6-6369-7394

Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted…

LOW 24

Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial of service (application crash) via a crafted ZIP file that is not properly handled when the victim us…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02095 Published 2010-03-03 No fix listed CWE-119

TI-2009-04416 CVE-2009-4660 · GHSA-rcpp-5j9j-5g7r

Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server…

HIGH 78

Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary code via a long GET request to TCP port 6660.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.62713 Published 2010-03-03 No fix listed CWE-119

TI-2008-01838 CVE-2008-1914 · GHSA-fg3q-6gmp-5pqc

Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server…

HIGH 81

Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server in BigAnt Messenger 2.2 allows remote attackers to execute arbitrary code via a long URI in a request to TCP port 6080.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.73719 Published 2008-04-22 No fix listed CWE-119

Vulnerabilities

Filters