Skip to content
OpenAdvisories

Vendor

ikus060

44 known vulnerabilities.

Products

ikus060/rdiffweb 42 ikus060/minarca 2
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.1
    CVE-2023-5289

    Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

    Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • High 8.4
    CVE-2022-4724

    Improper Access Control in ikus060/rdiffweb

    Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • High 7.2
    CVE-2022-4722

    Authentication Bypass by Primary Weakness in ikus060/rdiffweb

    Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • High 8.2
    CVE-2022-3389

    Path Traversal in ikus060/rdiffweb

    Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • High 7.5
    CVE-2022-3371

    No limit in length of "Token name" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb

    Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • High 7.0
    CVE-2022-3274

    Cross-Site Request Forgery (CSRF) on user's settings in GitHub repository ikus060/rdiffweb prior to 2.4.6. in ikus060/rdiffweb

    Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • High 7.5
    CVE-2022-3251

    Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/minarca

    Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/minarca prior to 4.2.2.

    ikus060 ikus060/minarca
  • High 8.8
    CVE-2022-3221

    Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb

    Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.3.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • High 7.1
    CVE-2022-3179

    Weak Password Requirements in ikus060/rdiffweb

    Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • High 7.5
    CVE-2022-3174

    Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb

    Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.

    ikus060 ikus060/rdiffweb rdiffweb PyPI