wonko vulnerabilities

Products

• notftp 1
• Smolder 1

Latest wonko CVEs

Newest publication first

1. CVE-2024-58041 Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions

   Published 2026-02-23

   Critical·CVSS 9.1

   Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions. Smolder 1.51 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Smolder:...

2. CVE-2009-1407 Directory traversal vulnerability in config.php in NotFTP 1.3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in a certain languages[][file] parameter.

   Published 2009-04-24

   Medium·CVSS 6.8 EPSS 1.9%

   Directory traversal vulnerability in config.php in NotFTP 1.3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in a certain languages[][file] parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.