Vulnerabilities

TI-2025-34750 CVE-2025-55059 · GHSA-j4x8-5rjr-hgpc

CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

LOW 26

CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00188 Published 2025-11-17 No fix listed CWE-79

TI-2025-34749 CVE-2025-55058 · GHSA-hq63-j9w2-7wwh

CWE-20 Improper Input Validation

MEDIUM 42

CWE-20 Improper Input Validation

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00277 Published 2025-11-17 No fix listed CWE-20

TI-2025-34748 CVE-2025-55057 · GHSA-v59q-3486-qmpm

Multiple CWE-352 Cross-Site Request Forgery (CSRF)

LOW 37

Multiple CWE-352 Cross-Site Request Forgery (CSRF)

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00162 Published 2025-11-17 No fix listed CWE-352

TI-2025-34747 CVE-2025-55056 · GHSA-6r2h-258f-w4jp

Multiple CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

LOW 26

Multiple CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00188 Published 2025-11-17 No fix listed CWE-79

TI-2025-34746 CVE-2025-55055 · GHSA-r88h-r3pw-jxv8

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

MEDIUM 50

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00819 Published 2025-11-17 No fix listed CWE-78

TI-2022-22913 CVE-2022-46370 · GHSA-6rqp-hf8j-7x29

Rumpus - FTP server Improper Token Verification

LOW 38

Rumpus - FTP server version 9.0.7.1 Improper Token Verification– vulnerability may allow bypassing identity verification.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00231 Published 2023-01-12 No fix listed CWE-345

TI-2022-22912 CVE-2022-46369 · GHSA-574w-g6v4-fj73

Rumpus - FTP server Persistent cross-site scripting (PXSS) – Unspecified vector

LOW 32

Rumpus - FTP server version 9.0.7.1 Persistent cross-site scripting (PXSS) – vulnerability may allow inserting scripts into unspecified input fields.

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00439 Published 2023-01-12 No fix listed CWE-79

TI-2022-22911 CVE-2022-46368 · GHSA-p528-mrgw-3q8p

Rumpus - FTP server Cross-site request forgery (CSRF) – Create user

LOW 38

Rumpus - FTP server version 9.0.7.1 Cross-site request forgery (CSRF) – vulnerability may allow unauthorized action on behalf of authenticated users.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00271 Published 2023-01-12 No fix listed CWE-352

TI-2022-22910 CVE-2022-46367 · GHSA-q4gj-rcjg-xcwr

Cross-site request forgery in Rumpus FTP server

MEDIUM 40

Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation vulnerability that may allow privilege escalation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00271 Published 2023-01-12 No fix listed CWE-352

TI-2022-18569 CVE-2022-39187 · GHSA-jw92-fcgv-875g

Rumpus - FTP server Reflected cross-site scripting (RXSS)

LOW 30

Rumpus - FTP server version 9.0.7.1 has a Reflected cross-site scripting (RXSS) vulnerability through unspecified vectors.

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00431 Published 2023-01-12 No fix listed CWE-79

TI-2020-16711 CVE-2020-27576 · GHSA-f895-2cv4-3f88

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting (XSS).

LOW 25

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting (XSS).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00564 Published 2021-03-08 No fix listed CWE-79

TI-2020-16710 CVE-2020-27575 · GHSA-7993-8pv5-9hpg

Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability.

MEDIUM 44

Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03075 Published 2021-03-08 No fix listed CWE-78

TI-2020-16709 CVE-2020-27574 · GHSA-j9wp-3gcm-78qq

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF).

LOW 39

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00758 Published 2021-03-08 No fix listed CWE-352

TI-2020-10125 CVE-2020-12737 · GHSA-8qq4-4mf9-45qp

An issue was discovered in Maxum Rumpus before 8.2.12 on macOS.

LOW 31

An issue was discovered in Maxum Rumpus before 8.2.12 on macOS.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01135 Published 2020-05-08 No fix listed CWE-22

TI-2019-14170 CVE-2019-19668 · GHSA-g9vc-549w-89mj

A CSRF vulnerability exists in the File Types component of Web File Manager in Rumpus FTP…

LOW 20

A CSRF vulnerability exists in the File Types component of Web File Manager in Rumpus FTP 8.2.9.1 that allows an attacker to add or delete the file types that are used on the server via RAPR/TriggerServerFunction.html.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00379 Published 2020-02-10 No fix listed CWE-352

TI-2019-14171 CVE-2019-19669 · GHSA-3fcf-gf78-2qgj

A CSRF vulnerability exists in the Upload Center Forms Component of Web File Manager in…

LOW 29

A CSRF vulnerability exists in the Upload Center Forms Component of Web File Manager in Rumpus FTP 8.2.9.1.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00435 Published 2020-02-10 No fix listed CWE-352

TI-2019-14172 CVE-2019-19670 · GHSA-fmp2-fgq3-89w8

A HTTP Response Splitting vulnerability was identified in the Web Settings Component of…

LOW 28

A HTTP Response Splitting vulnerability was identified in the Web Settings Component of Web File Manager in Rumpus FTP Server 8.2.9.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00724 Published 2020-02-10 No fix listed

TI-2019-14169 CVE-2019-19667 · GHSA-vg76-5r64-fww4

A CSRF vulnerability exists in the Block Clients component of Web File Manager in Rumpus…

LOW 25

A CSRF vulnerability exists in the Block Clients component of Web File Manager in Rumpus FTP 8.2.9.1 that could allow an attacker to whitelist or block any IP address via RAPR/BlockedClients.html.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00374 Published 2020-02-10 No fix listed CWE-352

TI-2019-14168 CVE-2019-19666 · GHSA-mmrg-3qpr-5x5f

A CSRF vulnerability exists in the Event Notices Settings of Web File Manager in Rumpus…

LOW 20

A CSRF vulnerability exists in the Event Notices Settings of Web File Manager in Rumpus FTP 8.2.9.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00379 Published 2020-02-10 No fix listed CWE-352

TI-2019-14163 CVE-2019-19661 · GHSA-fch6-m5hq-hp9j

A Cookie based reflected XSS exists in the Web File Manager of Rumpus FTP Server 8.2.9.1…

LOW 29

A Cookie based reflected XSS exists in the Web File Manager of Rumpus FTP Server 8.2.9.1, related to RumpusLoginUserName and snp.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00766 Published 2020-02-10 No fix listed CWE-79

TI-2019-14164 CVE-2019-19662 · GHSA-57qh-vr32-57mv

A CSRF vulnerability exists in the Web File Manager's Create/Delete Accounts…

LOW 29

A CSRF vulnerability exists in the Web File Manager's Create/Delete Accounts functionality of Rumpus FTP Server 8.2.9.1.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00435 Published 2020-02-10 No fix listed CWE-352

TI-2019-14166 CVE-2019-19664 · GHSA-m975-fcxg-pwf3

A CSRF vulnerability exists in the Web Settings of Web File Manager in Rumpus FTP 8.2.9.1.

LOW 31

A CSRF vulnerability exists in the Web Settings of Web File Manager in Rumpus FTP 8.2.9.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00372 Published 2020-02-10 No fix listed CWE-352

TI-2019-14167 CVE-2019-19665 · GHSA-52x3-94cg-xpgf

A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1.

LOW 29

A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00435 Published 2020-02-10 No fix listed CWE-352

TI-2019-14165 CVE-2019-19663 · GHSA-p4r6-hcgx-wj4h

A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP…

LOW 29

A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00435 Published 2020-02-10 No fix listed CWE-352

TI-2019-14161 CVE-2019-19659 · GHSA-95hj-vv2p-554x

A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of…

LOW 39

A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0049 Published 2020-02-10 No fix listed CWE-352

Vulnerabilities

Filters