CVE-2018-25233 | Medium | 6.2 | 2026-03-30 | WebDrive 18.00.5057 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in… |
CVE-2024-1192 | Low | 3.3 | 2024-02-29 | A vulnerability was found in South River WebDrive 18.00.5057. It has been declared as problematic. This vulnerability affects unknown code of the component New… |
CVE-2023-45690 | Medium | 4.9 | 2023-10-16 | Default file permissions on South River Technologies' Titan MFT and Titan SFTP servers on Linux allows a user that's authentication to the OS to read sensitive… |
CVE-2023-45689 | Medium | 6.5 | 2023-10-16 | Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker with adm… |
CVE-2023-45688 | Medium | 4.3 | 2023-10-16 | Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an authenticated attacker to get the size of a… |
CVE-2023-45687 | High | 8.8 | 2023-10-16 | A session fixation vulnerability in South River Technologies' Titan MFT and Titan SFTP servers on Linux and Windows allows an attacker to bypass the server's a… |
CVE-2023-45686 | High | 7.2 | 2023-10-16 | Insufficient path validation when writing a file via WebDAV in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an authenticated atta… |
CVE-2023-45685 | Critical | 9.1 | 2023-10-16 | Insufficient path validation when extracting a zip archive in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authent… |
CVE-2022-44215 | Medium | 6.1 | 2023-08-22 | There is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected to any target URL. |
CVE-2023-27745 | High | 8.8 | 2023-06-02 | An issue in South River Technologies TitanFTP Before v2.0.1.2102 allows attackers with low-level privileges to perform Administrative actions by sending reques… |
CVE-2023-27744 | High | 7.8 | 2023-06-02 | An issue was discovered in South River Technologies TitanFTP NextGen server that allows for a vertical privilege escalation leading to remote code execution. |
CVE-2023-22629 | High | 8.8 | 2023-02-14 | An issue was discovered in TitanFTP through 1.94.1205. The move-file function has a path traversal vulnerability in the newPath parameter. An authenticated att… |
CVE-2022-34006 | High | 7.8 | 2022-06-19 | An issue was discovered in TitanFTP (aka Titan FTP) NextGen before 1.2.1050. When installing, Microsoft SQL Express 2019 installs by default with an SQL instan… |
CVE-2022-34005 | Critical | 9.8 | 2022-06-19 | An issue was discovered in TitanFTP (aka Titan FTP) NextGen before 1.2.1050. There is Remote Code Execution due to a hardcoded password for the sa account on t… |
CVE-2019-10009 | Medium | 6.5 | 2019-06-03 | A Directory Traversal issue was discovered in the Web GUI in Titan FTP Server 2019 Build 3505. When an authenticated user attempts to preview an uploaded file… |
CVE-2014-1843 | | | 2014-04-29 | Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information o… |
CVE-2014-1842 | | | 2014-04-29 | Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to list all usernames via a Go actio… |
CVE-2014-1841 | | | 2014-04-29 | Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to copy an arbitrary user's home fol… |
CVE-2010-2426 | | | 2010-06-24 | Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticat… |
CVE-2010-2425 | | | 2010-06-24 | Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticat… |
CVE-2008-6082 | | | 2009-02-06 | Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service (CPU consumption) via the SITE WHO command. |