Vulnerabilities (CVE)

Filtered by vendor Ipswitch Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-29847 1 Ipswitch 1 Whatsup Gold 2022-05-20 5.0 MEDIUM 7.5 HIGH
In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to invoke an API transaction that would allow them to relay encrypted WhatsUp Gold user credentials to an arbitrary host.
CVE-2019-12145 1 Ipswitch 1 Ws Ftp Server 2019-06-12 5.0 MEDIUM 7.5 HIGH
A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1. An attacker can supply a string using special patterns via the SCP protocol to disclose path names on the host operating system.
CVE-2017-16513 1 Ipswitch 1 Ws Ftp 2017-11-27 4.6 MEDIUM 7.8 HIGH
Ipswitch WS_FTP Professional before 12.6.0.3 has buffer overflows in the local search field and the backup locations field, aka WSCLT-1729.
CVE-2016-1000000 1 Ipswitch 1 Whatsup Gold 2017-11-03 6.5 MEDIUM 8.8 HIGH
Ipswitch WhatsUp Gold 16.4.1 WrFreeFormText.asp sUniqueID Parameter Blind SQL Injection
CVE-2015-7678 1 Ipswitch 1 Moveit Mobile 2016-02-18 6.8 MEDIUM 8.8 HIGH
Multiple cross-site request forgery (CSRF) vulnerabilities in Ipswitch MOVEit Mobile 1.2.0.962 and earlier allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.