Browse CVEs

CRITICAL 9.8 CVE-2020-11705 An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/ImportCertificate allows an attacker to load an arbitrary certificate in… Provide Ftp Server after 13.1 Fix from $2,3002020-04-12 CRITICAL 9.8 CVE-2020-11708 An issue was discovered in ProVide (formerly zFTPServer) through 13.1. Privilege escalation can occur via the /ajax/SetUserInfo messages parameter be… Provide Ftp Server after 13.1 Fix from $2,3002020-04-12 HIGH 8.8 CVE-2020-11706 An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Interface allows CSRF for actions such as: Change any username and p… Provide Ftp Server after 13.1 Fix from $1,9502020-04-12 HIGH 8.8 CVE-2020-11707 An issue was discovered in ProVide (formerly zFTPServer) through 13.1. It doesn't enforce permission over Windows Symlinks or Junctions. As a result,… Provide Ftp Server after 13.1 Fix from $1,9502020-04-12 HIGH 8.8 CVE-2020-11701 An issue was discovered in ProVide (formerly zFTPServer) through 13.1. CSRF exists in the User Web Interface, as demonstrated by granting filesystem … Provide Ftp Server after 13.1 Fix from $1,9502020-04-12 HIGH 7.5 CVE-2020-11703 An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/GetInheritedProperties allows HTTP Response Splitting via the language p… Provide Ftp Server after 13.1 Fix from $1,9502020-04-12 MEDIUM 6.1 CVE-2020-11702 An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The User Web Interface has Multiple Stored and Reflected XSS issues. Collabora… Provide Ftp Server after 13.1 Fix from $1,6002020-04-12 MEDIUM 6.1 CVE-2020-11704 An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Web Interface has Multiple Stored and Reflected XSS. GetInheritedPro… Provide Ftp Server after 13.1 Fix from $1,6002020-04-12