CrushFTP vulnerabilities
CVEs whose affected-version data names the CrushFTP package (rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2015-20129High· 8.8CrushFTP before 7.3.0 Cross-Site Request Forgery via /WebInterface/function/
CrushFTP before 7.3.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions because CSRF protection is disabled by default. Attackers can lure an authenticated administrator to a mali…
▾ TwilightCrushFTP · CrushFTPvia CVEORG
CVE-2023-48795Medium· 5.9PoCThe SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), a…
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), a…
▾ Twilightopenbsd · opensshEPSS 94%via NVD