Bigantsoft
7 CVEs across 5 Bigantsoft products. Browse Bigantsoft vulnerabilities, severities, and proof-of-concept exploits.
Bigantsoft products with known CVEs
Bigantsoft CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-0364 | Critical | 9.8 | 2025-02-04 | BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticat… |
CVE-2024-54761 | Medium | 6.3 | 2025-01-09 | BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter. |
CVE-2021-43430 | High | 8.8 | 2022-04-07 | An Access Control vulnerability exists in BigAntSoft BigAnt office messenger 5.6 via im_webserver, which could let a malicious user upload PHP Trojan files. |
CVE-2022-26281 | High | 7.5 | 2022-04-05 | BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue. |
CVE-2022-23352 | High | 7.5 | 2022-03-21 | An issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service (DoS). |
CVE-2022-23350 | Medium | 5.4 | 2022-03-21 | BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting (XSS) vulnerability. |
CVE-2022-23349 | High | 8.8 | 2022-03-21 | BigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery (CSRF). |
CVE-2022-23348 | Medium | 5.3 | 2022-03-21 | BigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password hashes. |
CVE-2022-23347 | High | 7.5 | 2022-03-21 | BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks. |
CVE-2022-23346 | High | 8.8 | 2022-03-21 | BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues. |
CVE-2022-23345 | High | 7.5 | 2022-03-21 | BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control. |
CVE-2012-6275 | | | 2013-02-24 | Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via (1) the file… |
CVE-2012-6274 | | | 2013-02-24 | BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer… |
CVE-2012-6273 | | | 2013-02-24 | SQL injection vulnerability in BigAntSoft BigAnt IM Message Server allows remote attackers to execute arbitrary SQL commands via an SHU (aka search user) reque… |
CVE-2009-4661 | | | 2010-03-03 | Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial of service (application crash) via a cra… |
CVE-2009-4660 | | | 2010-03-03 | Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary code via a long GET r… |
CVE-2008-1914 | | | 2008-04-22 | Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server in BigAnt Messenger 2.2 allows remote attackers to execute arbitrary co… |