Diskboss

3 CVEs product

Monthly

CVE-2020-36882 HIGH POC This Week

Flexsense DiskBoss 7.7.14 allows unauthenticated attackers to upload arbitrary files via /Command/Search Files/Directory field, leading to a denial of service by crashing the application.

File Upload Denial Of Service Diskboss
NVD GitHub Exploit-DB
CVSS 3.1
7.5
EPSS
0.2%
CVE-2020-36881 HIGH POC This Week

Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Input Directory' component that allows unauthenticated attackers to execute arbitrary code on the system. Attackers can exploit this by pasting a specially crafted directory path into the 'Add Input Directory' field.

Buffer Overflow RCE Diskboss
NVD GitHub Exploit-DB
CVSS 3.1
7.8
EPSS
0.0%
CVE-2020-36880 HIGH POC This Week

Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Reports and Data Directory' field that allows an attacker to execute arbitrary code on the system.

Buffer Overflow RCE Diskboss
NVD Exploit-DB
CVSS 3.1
7.8
EPSS
0.0%
CVE-2020-36882
EPSS 0% CVSS 7.5
HIGH POC This Week

Flexsense DiskBoss 7.7.14 allows unauthenticated attackers to upload arbitrary files via /Command/Search Files/Directory field, leading to a denial of service by crashing the application.

File Upload Denial Of Service Diskboss
NVD GitHub Exploit-DB
CVE-2020-36881
EPSS 0% CVSS 7.8
HIGH POC This Week

Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Input Directory' component that allows unauthenticated attackers to execute arbitrary code on the system. Attackers can exploit this by pasting a specially crafted directory path into the 'Add Input Directory' field.

Buffer Overflow RCE Diskboss
NVD GitHub Exploit-DB
CVE-2020-36880
EPSS 0% CVSS 7.8
HIGH POC This Week

Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Reports and Data Directory' field that allows an attacker to execute arbitrary code on the system.

Buffer Overflow RCE Diskboss
NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy