CVE-2025-55059 | Medium | 4.8 | 2025-11-17 | CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') |
CVE-2025-55058 | Medium | 4.5 | 2025-11-17 | CWE-20 Improper Input Validation |
CVE-2025-55057 | Medium | 4.5 | 2025-11-17 | Multiple CWE-352 Cross-Site Request Forgery (CSRF) |
CVE-2025-55056 | Medium | 4.8 | 2025-11-17 | Multiple CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') |
CVE-2025-55055 | Medium | 6.8 | 2025-11-17 | CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') |
CVE-2022-46370 | High | 7.3 | 2023-01-12 | Rumpus - FTP server version 9.0.7.1 Improper Token Verification– vulnerability may allow bypassing identity verification. |
CVE-2022-46369 | Medium | 6.8 | 2023-01-12 | Rumpus - FTP server version 9.0.7.1 Persistent cross-site scripting (PXSS) – vulnerability may allow inserting scripts into unspecified input fields. |
CVE-2022-46368 | Medium | 6.8 | 2023-01-12 | Rumpus - FTP server version 9.0.7.1 Cross-site request forgery (CSRF) – vulnerability may allow unauthorized action on behalf of authenticated users. |
CVE-2022-46367 | Medium | 6.8 | 2023-01-12 | Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation vulnerability that may allow privilege escalation. |
CVE-2022-39187 | Medium | 6.8 | 2023-01-12 | Rumpus - FTP server version 9.0.7.1 has a Reflected cross-site scripting (RXSS) vulnerability through unspecified vectors. |
CVE-2020-27576 | Medium | 5.4 | 2021-03-08 | Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting (XSS). Users are able to create folders in the web application. The folder name is insuffici… |
CVE-2020-27575 | High | 8.8 | 2021-03-08 | Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web administration contains functionality in which administrators are able… |
CVE-2020-27574 | High | 8.8 | 2021-03-08 | Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF). If an authenticated user visits a malicious page, unintended actions could be… |
CVE-2020-12737 | Medium | 6.5 | 2020-05-08 | An issue was discovered in Maxum Rumpus before 8.2.12 on macOS. Authenticated users can perform a path traversal using double escaped characters, enabling read… |
CVE-2019-19668 | Medium | 4.3 | 2020-02-10 | A CSRF vulnerability exists in the File Types component of Web File Manager in Rumpus FTP 8.2.9.1 that allows an attacker to add or delete the file types that… |
CVE-2019-19670 | Medium | 6.1 | 2020-02-10 | A HTTP Response Splitting vulnerability was identified in the Web Settings Component of Web File Manager in Rumpus FTP Server 8.2.9.1. A successful exploit can… |
CVE-2019-19669 | Medium | 6.5 | 2020-02-10 | A CSRF vulnerability exists in the Upload Center Forms Component of Web File Manager in Rumpus FTP 8.2.9.1. This could allow an attacker to delete, create, and… |
CVE-2019-19667 | Medium | 5.4 | 2020-02-10 | A CSRF vulnerability exists in the Block Clients component of Web File Manager in Rumpus FTP 8.2.9.1 that could allow an attacker to whitelist or block any IP… |
CVE-2019-19666 | Medium | 4.3 | 2020-02-10 | A CSRF vulnerability exists in the Event Notices Settings of Web File Manager in Rumpus FTP 8.2.9.1. An attacker can create/update event notices via RAPR/Event… |
CVE-2019-19661 | Medium | 6.1 | 2020-02-10 | A Cookie based reflected XSS exists in the Web File Manager of Rumpus FTP Server 8.2.9.1, related to RumpusLoginUserName and snp. |
CVE-2019-19664 | High | 7.1 | 2020-02-10 | A CSRF vulnerability exists in the Web Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnerability can result in manipulation of Ser… |
CVE-2019-19662 | Medium | 6.5 | 2020-02-10 | A CSRF vulnerability exists in the Web File Manager's Create/Delete Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can Crea… |
CVE-2019-19665 | Medium | 6.5 | 2020-02-10 | A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnerability can result in manipulation of Ser… |
CVE-2019-19663 | Medium | 6.5 | 2020-02-10 | A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1. This allows an attacker to Create/Delete Folders after explo… |
CVE-2019-19660 | Medium | 6.5 | 2020-02-10 | A CSRF vulnerability exists in the Web File Manager's Network Setting functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can manipulate… |
CVE-2019-19659 | High | 8.8 | 2020-02-10 | A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can take over a u… |
CVE-2020-8514 | Medium | 6.1 | 2020-02-02 | An issue was discovered in Rumpus 8.2.10 on macOS. By crafting a directory name, it is possible to activate JavaScript in the context of the web application af… |
CVE-2019-19368 | Medium | 6.1 | 2019-12-16 | A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link… |
CVE-2008-7078 | | | 2009-08-25 | Multiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a denial of service (segmentation fault) via a long HTTP verb in the HTTP… |