ikus060 vulnerabilities

Products

• ikus060/rdiffweb 42
• ikus060/minarca 2

Latest ikus060 CVEs

Newest publication first · page 1 of 2

1. CVE-2023-5289 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

   Published 2023-09-29

   High·CVSS 8.8 EPSS 0.78%

   Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.

2. CVE-2023-4138 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

   Published 2023-08-03

   Medium·CVSS 6.5 EPSS 0.45%

   Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.0.

3. CVE-2022-4722 Authentication Bypass by Primary Weakness in ikus060/rdiffweb

   Published 2022-12-23

   High·CVSS 7.2 EPSS 1.2%

   Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.

4. CVE-2022-4724 Improper Access Control in ikus060/rdiffweb

   Published 2022-12-23

   Critical·CVSS 9.8 EPSS 0.88%

   Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.

5. CVE-2022-4720 Open Redirect in ikus060/rdiffweb

   Published 2022-12-23

   Medium·CVSS 6.1 EPSS 0.51%

   Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5.

6. CVE-2022-4721 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in ikus060/rdiffweb

   Published 2022-12-23

   Medium·CVSS 5.4 EPSS 0.52%

   Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.

7. CVE-2022-4723 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

   Published 2022-12-23

   Medium·CVSS 6.5 EPSS 0.67%

   Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.

8. CVE-2022-4719 Business Logic Errors in ikus060/rdiffweb

   Published 2022-12-23

   Critical·CVSS 9.8 EPSS 1.0%

   Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.

9. CVE-2022-4646 Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb

   Published 2022-12-22

   Medium·CVSS 6.5 EPSS 0.34%

   Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.

10. CVE-2022-4644 Open Redirect in ikus060/rdiffweb

    Published 2022-12-22

    Medium·CVSS 6.1 EPSS 0.64%

    Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.

11. CVE-2022-4314 Improper Privilege Management in ikus060/rdiffweb

    Published 2022-12-06

    Critical·CVSS 9.8 EPSS 0.86%

    Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2.

12. CVE-2022-4018 Missing Authentication for Critical Function in ikus060/rdiffweb

    Published 2022-11-16

    Medium·CVSS 4.3 EPSS 1.00%

    Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.

13. CVE-2022-3362 Insufficient Session Expiration in ikus060/rdiffweb

    Published 2022-11-14

    Critical·CVSS 9.8 EPSS 1.1%

    Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0.

14. CVE-2022-3363 Business Logic Errors in ikus060/rdiffweb

    Published 2022-10-26

    Critical·CVSS 9.8 EPSS 1.0%

    Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7.

15. CVE-2022-3327 Missing Authentication for Critical Function in ikus060/rdiffweb

    Published 2022-10-19

    Critical·CVSS 9.8 EPSS 1.0%

    Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.

16. CVE-2022-3439 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

    Published 2022-10-14

    Critical·CVSS 9.8 EPSS 0.82%

    Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.

17. CVE-2022-3456 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

    Published 2022-10-13

    Critical·CVSS 9.8 EPSS 0.41%

    Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.

18. CVE-2022-3457 Origin Validation Error in ikus060/rdiffweb

    Published 2022-10-13

    Critical·CVSS 9.8 EPSS 0.44%

    Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5.

19. CVE-2022-3438 Open Redirect in ikus060/rdiffweb

    Published 2022-10-10

    Medium·CVSS 6.1 EPSS 0.68%

    Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.

20. CVE-2022-3389 Path Traversal in ikus060/rdiffweb

    Published 2022-10-06

    High·CVSS 7.5 EPSS 1.4%

    Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10.

21. CVE-2022-3273 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

    Published 2022-10-06

    Critical·CVSS 9.8 EPSS 0.57%

    Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.

22. CVE-2022-3376 Weak Password Requirements in ikus060/rdiffweb

    Published 2022-10-06

    Medium·CVSS 5.3 EPSS 0.84%

    Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.

23. CVE-2022-3371 No limit in length of "Token name" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb

    Published 2022-09-30

    High·CVSS 7.5 EPSS 1.3%

    Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.

24. CVE-2022-3364 No limit in length of "Fullname" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb

    Published 2022-09-29

    High·CVSS 7.5 EPSS 1.2%

    Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.

25. CVE-2022-3326 Weak Password Requirements in ikus060/rdiffweb

    Published 2022-09-28

    Medium·CVSS 4.3 EPSS 0.70%

    Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.