Rhinosoft

rhinosoft

7 CVEs • 4 products

Products (4)

Click to collapse

Toggle

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2010-4154 1Rhinosoft 1Ftp Voyager Apr 29, 2026 Nov 3, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Directory traversal vulnerability in Rhino Software, Inc. FTP Voyager 15.2.0.11, and possibly earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.
CVE-2009-4873 1Rhinosoft 1Serv U Apr 29, 2026 May 26, 2010 N/A· v4 N/A· v3 10.0 HIGH· v2 Stack-based buffer overflow in the HTTP server in Rhino Software Serv-U Web Client 9.0.0.5 allows remote attackers to cause a denial of service (server crash) or execute arbitrary code via a long Session cookie.
CVE-2007-1079 1Rhinosoft 1Ftp Voyager Apr 23, 2026 Feb 22, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 Stack-based buffer overflow in Rhino Software, Inc. FTP Voyager 14.0.0.3 and earlier allows remote servers to cause a denial of service (crash) via a long response to a CWD command, which triggers the overflow when the u...Show more Stack-based buffer overflow in Rhino Software, Inc. FTP Voyager 14.0.0.3 and earlier allows remote servers to cause a denial of service (crash) via a long response to a CWD command, which triggers the overflow when the user aborts the command.Show less
CVE-2004-1691 1Rhinosoft 1Dns4me Apr 16, 2026 Sep 18, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Web Server in DNS4Me 3.0.0.4 allows remote attackers to cause a denial of service (CPU consumption and crash) via a large amount of data.
CVE-2004-1690 1Rhinosoft 1Dns4me Apr 16, 2026 Sep 18, 2004 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the Web Server in DNS4Me 3.0.0.4 allows remote attackers to execute arbitrary web script or HTML via the URL.
CVE-2004-1939 1Rhinosoft 1Zaep Antispam Apr 16, 2026 Apr 14, 2004 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or HTML via double encoded slashes (%252F) in the key parameter.
CVE-2001-1103 1Rhinosoft 1Ftp Voyager Apr 16, 2026 Mar 3, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 FTP Voyager ActiveX control before 8.0, when it is marked as safe for scripting (the default) or if allowed by the IObjectSafety interface, allows remote attackers to execute arbitrary commands.