CVEs (5)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Evolvable Corporation 1Shambala Server Apr 16, 2026 Oct 4, 2002 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) LIST (ls) or (2) GET commands. |
1Evolvable Corporation 1Shambala Server Apr 16, 2026 Oct 4, 2002 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request. |
1Evolvable Corporation 1Shambala Server Apr 16, 2026 Oct 18, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Directory traversal vulnerability in Shambala 4.5 allows remote attackers to escape the FTP root directory via "CWD ..." command. |
1Evolvable Corporation 1Shambala Server Apr 16, 2026 Dec 19, 2000 N/A· v4 N/A· v3 10.0 HIGH· v2 Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server. |
1Evolvable Corporation 1Shambala Server Apr 16, 2026 Dec 19, 2000 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection. |