Known Vulnerabilities for products from Ikus-soft

Listed below are 20 of the newest known vulnerabilities associated with the vendor "Ikus-soft".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2023-5289 json Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4. 8.8 - HIGH 2023-09-29 2023-10-02
CVE-2023-4138 json Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.0. 6.5 - MEDIUM 2023-08-03 2023-08-08
CVE-2022-4724 json Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5. 9.8 - CRITICAL 2022-12-27 2023-01-05
CVE-2022-4723 json Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5. 6.5 - MEDIUM 2022-12-27 2023-01-05
CVE-2022-4722 json Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5. 7.2 - HIGH 2022-12-27 2023-07-17
CVE-2022-4721 json Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb... 5.4 - MEDIUM 2022-12-27 2023-01-05
CVE-2022-4720 json Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5. 6.1 - MEDIUM 2022-12-27 2023-01-05
CVE-2022-4719 json Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5. 9.8 - CRITICAL 2022-12-27 2023-01-05
CVE-2022-4646 json Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4. 6.5 - MEDIUM 2022-12-22 2022-12-29
CVE-2022-4644 json Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4. 6.1 - MEDIUM 2022-12-22 2022-12-29
CVE-2022-4314 json Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2. 9.8 - CRITICAL 2022-12-12 2022-12-15
CVE-2022-4018 json Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6. 4.3 - MEDIUM 2022-11-16 2022-11-18
CVE-2022-3457 json Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5. 9.8 - CRITICAL 2022-10-13 2022-10-14
CVE-2022-3456 json Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0. 9.8 - CRITICAL 2022-10-13 2022-10-14
CVE-2022-3439 json Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0. 9.8 - CRITICAL 2022-10-14 2022-10-15
CVE-2022-3438 json Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. 6.1 - MEDIUM 2022-10-10 2022-10-11
CVE-2022-3389 json Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10. 7.5 - HIGH 2022-10-06 2022-10-06
CVE-2022-3376 json Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. 5.3 - MEDIUM 2022-10-06 2022-10-12
CVE-2022-3371 json Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3. 7.5 - HIGH 2022-09-30 2022-10-04
CVE-2022-3364 json Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3. 7.5 - HIGH 2022-09-29 2022-10-04

Known software with vulnerabilities from Ikus-soft

Type Vendor Product Version
ApplicationIkus-softRdiffweb0.10.0