Flexense
43 CVEs across 16 Flexense products. Browse Flexense vulnerabilities, severities, and proof-of-concept exploits.
Flexense products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-37100 | High | 7.8 | 2026-02-03 | Sync Breeze Enterprise 12.4.18 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privi… |
CVE-2025-59901 | | 2026-01-28 | Disk Pulse Enterprise v10.4.18 has an authenticated reflected XSS vulnerability in the '/monitor_directory?sid=' endpoint, caused by insufficient validation of… | |
CVE-2025-59900 | Medium | 5.4 | 2026-01-28 | Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attac… |
CVE-2025-59899 | Medium | 5.4 | 2026-01-28 | Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attac… |
CVE-2025-59898 | Medium | 5.4 | 2026-01-28 | Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attac… |
CVE-2025-59897 | Medium | 5.4 | 2026-01-28 | Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attac… |
CVE-2025-59896 | Medium | 5.4 | 2026-01-28 | Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a persistent authenticated Cross-Site Scripting (XSS) vulnerability. An attac… |
CVE-2025-59895 | High | 7.5 | 2026-01-28 | Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18 contain a remote denial-of-service (DoS) vulnerability in the configuration restore f… |
CVE-2025-59894 | High | 8.0 | 2026-01-28 | Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause… |
CVE-2025-59893 | High | 8.0 | 2026-01-28 | Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause… |
CVE-2025-59892 | High | 8.0 | 2026-01-28 | Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause… |
CVE-2025-59891 | High | 8.0 | 2026-01-28 | Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server v10.4.18 and Disk Pulse Enterprise v10.4.18. An authenticated user could cause… |
CVE-2020-36946 | High | 7.5 | 2026-01-27 | SyncBreeze 10.0.28 contains a denial of service vulnerability in the login endpoint that allows remote attackers to crash the service. Attackers can send an ov… |
CVE-2021-47809 | High | 7.8 | 2026-01-16 | Disk Sorter Enterprise 13.6.12 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially… |
CVE-2021-47807 | High | 7.8 | 2026-01-16 | Sync Breeze 13.6.18 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arb… |
CVE-2021-47806 | High | 7.8 | 2026-01-16 | Dup Scout 13.5.28 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbit… |
CVE-2021-47805 | High | 7.8 | 2026-01-16 | Disk Savvy 13.6.14 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbi… |
CVE-2020-36930 | High | 7.8 | 2026-01-16 | SysGauge Server 7.9.18 contains an unquoted service path vulnerability in its binary path configuration that allows local attackers to potentially execute arbi… |
CVE-2020-36927 | High | 7.8 | 2026-01-16 | DiskPulse Enterprise 13.6.14 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially ex… |
CVE-2020-36882 | High | 7.5 | 2025-12-05 | Flexsense DiskBoss 7.7.14 allows unauthenticated attackers to upload arbitrary files via /Command/Search Files/Directory field, leading to a denial of service… |
CVE-2020-36881 | High | 7.8 | 2025-12-05 | Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Input Directory' component that allows unauthenticated attackers to execute ar… |
CVE-2020-36880 | High | 7.8 | 2025-12-05 | Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Reports and Data Directory' field that allows an attacker to execute arbitrary… |
CVE-2025-34105 | | 2025-07-15 | A stack-based buffer overflow vulnerability exists in the built-in web interface of DiskBoss Enterprise versions 7.4.28, 7.5.12, and 8.2.14. The vulnerability… | |
CVE-2023-49575 | High | 7.1 | 2024-05-24 | A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14, in Sync Breeze Enterprise Server 10.4.18 version, and in Disk Pulse Ente… |
CVE-2023-49574 | High | 7.1 | 2024-05-24 | A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14 that could allow an attacker to execute persistent XSS through /add_job i… |
CVE-2023-49573 | High | 7.1 | 2024-05-24 | A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14 that could allow an attacker to execute persistent XSS through /add_comma… |
CVE-2023-49572 | High | 7.1 | 2024-05-24 | A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14, and in Disk Pulse Enterprise 10.4.18 version, that could allow an attack… |
CVE-2020-29659 | Critical | 9.8 | 2020-12-09 | A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid… |
CVE-2018-10568 | Medium | 6.1 | 2018-05-02 | XSS exists in Flexense DiskSorter Enterprise from v9.5.12 to v10.7. |
CVE-2018-10567 | Medium | 6.1 | 2018-05-02 | XSS exists in Flexense VX Search Enterprise from v10.1.12 to v10.7. |
CVE-2018-10566 | Medium | 6.1 | 2018-05-02 | XSS exists in Flexense DupScout Enterprise from v10.0.18 to v10.7. |
CVE-2018-10565 | Medium | 6.1 | 2018-05-02 | XSS exists in Flexense DiskSavvy Enterprise from v10.4 to v10.7. |
CVE-2018-10564 | Medium | 6.1 | 2018-05-02 | XSS exists in Flexense DiskPulse Enterprise from v10.4 to v10.7. |
CVE-2018-10563 | Medium | 6.1 | 2018-05-02 | An XSS in Flexense SyncBreeze affects all versions (tested from SyncBreeze Enterprise from v10.1 to v10.7). |
CVE-2018-10294 | Medium | 6.1 | 2018-05-02 | Flexense DiskBoss Enterprise v7.4.28 to v9.1.16 has XSS. |
CVE-2018-8065 | High | 7.5 | 2018-03-12 | An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory regi… |
CVE-2018-6481 | Critical | 9.8 | 2018-02-27 | A buffer overflow vulnerability in the control protocol of Disk Savvy Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending a crafte… |
CVE-2017-17996 | High | 8.8 | 2018-02-06 | A buffer overflow vulnerability in "Add command" functionality exists in Flexense SyncBreeze Enterprise <= 10.3.14. The vulnerability can be triggered by an au… |
CVE-2018-5261 | High | 8.1 | 2018-02-02 | An issue was discovered in Flexense DiskBoss 8.8.16 and earlier. Due to the usage of plaintext information from the handshake as input for the encryption key u… |
CVE-2018-6537 | Critical | 9.8 | 2018-02-02 | A buffer overflow vulnerability in the control protocol of Flexense SyncBreeze Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending… |
CVE-2017-13696 | Critical | 9.8 | 2018-01-24 | A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze Enterprise 9.9.16, a… |
CVE-2018-5359 | High | 8.1 | 2018-01-23 | The server in Flexense SysGauge 3.6.18 operating on port 9221 can be exploited remotely with the attacker gaining system-level access because of a Buffer Overf… |
CVE-2018-5262 | Critical | 9.8 | 2018-01-12 | A stack-based buffer overflow in Flexense DiskBoss 8.8.16 and earlier allows unauthenticated remote attackers to execute arbitrary code in the context of a hig… |
CVE-2017-15665 | High | 7.5 | 2018-01-10 | In Flexense DiskBoss Enterprise 8.5.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO pac… |
CVE-2017-15664 | High | 7.5 | 2018-01-10 | In Flexense Sync Breeze Enterprise v10.1.16, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INF… |
CVE-2017-15663 | High | 7.5 | 2018-01-10 | In Flexense Disk Pulse Enterprise v10.1.18, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO… |
CVE-2017-15662 | High | 7.5 | 2018-01-10 | In Flexense VX Search Enterprise v10.1.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO… |
CVE-2017-15667 | High | 7.5 | 2017-12-28 | In Flexense SysGauge Server 3.6.18, the Control Protocol suffers from a denial of service. The attack vector is a crafted SERVER_GET_INFO packet sent to contro… |
CVE-2017-17088 | High | 7.5 | 2017-12-19 | The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial of Service vulnerability. The web server does not check bounds when rea… |
CVE-2017-17099 | High | 7.8 | 2017-12-03 | There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When sending a GET reque… |
CVE-2017-15950 | High | 7.8 | 2017-10-31 | Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by… |
CVE-2017-15220 | Critical | 9.8 | 2017-10-11 | Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginning with a /../ substring. This allows r… |
CVE-2017-14980 | Critical | 9.8 | 2017-10-10 | Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login. |
CVE-2017-7310 | High | 7.8 | 2017-03-29 | A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy befo… |
CVE-2017-6416 | Critical | 9.8 | 2017-03-06 | An issue was discovered in SysGauge 1.5.18. A buffer overflow vulnerability in SMTP connection verification leads to arbitrary code execution. The attack vecto… |