Skip to content
OpenAdvisories

Archive

22 March 2019

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2018-20165 Public exploit

    Cross-site scripting (XSS) vulnerability in OpenText Portal 7.4.4 allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2019-9649 Public exploit EPSS 15%

    An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. Using the MDTM FTP command, a remote at…

  • Medium 5.3
    CVE-2019-9648 Public exploit EPSS 14%

    CoreFTP Directory Traversal

    An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE command along with a \..\..\ substring, allowing an attacker to enumerate file existence based on the returned informatio…