Multi Server

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users with the create folder permission to execute arbitrary code…CVE-2012-6530Sysax · 46% likely

   CWE-119

2. Sysax Multi Server < 5.55 SSH Username Buffer OverflowCVE-2012-10060Sysax Software · CVSS 9.3 · 4.7% likely

   CWE-121

3. Multiple directory traversal vulnerabilities in Sysax Multi Server 4.5 allow remote authenticated users to read or modify arbitrary files via crafted FTP commands. NOTE: the prove…CVE-2009-4790Sysax · 3.9% likely

   CWE-22

4. An issue was discovered in Sysax Multi Server 6.90. There is reflected XSS via the /scgi sid parameter.CVE-2020-13228Sysax · 3.2% likely

   CWE-79

5. Sysax Multi-Server <= 6.10 SSHD Key Exchange DoSCVE-2013-10065Sysax Software · CVSS 8.7 · 1.9% likely

   CWE-248

6. Directory traversal vulnerability in Sysax Multi Server 4.3 and 4.5 allows remote authenticated users to delete arbitrary files via a ..// (dot dot slash slash) in a DELE command.CVE-2009-4800Sysax · 1.9% likely

   CWE-22

7. An issue was discovered in Sysax Multi Server 6.90. An attacker can determine the username (under which the web server is running) by triggering an invalid path permission error.…CVE-2020-13227Sysax · 1.9% likely

   CWE-22

8. An issue was discovered in Sysax Multi Server 6.90. A session can be hijacked if one observes the sid value in any /scgi URI, because it is an authentication token.CVE-2020-13229Sysax · 1.6% likely

   CWE-384

9. When uploading a file in Sysax Multi Server 6.90, an authenticated user can modify the filename="" parameter in the uploadfile_name1.htm form to a length of 368 or more bytes. Thi…CVE-2020-23574Sysax · 0.9% likely

   CWE-119

10. Sysax Multi Server 6.99 is vulnerable to a denial of service (DoS) condition when processing specially crafted SSH packets.CVE-2024-53458Sysax · CVSS 7.5 · 0.5% likely

    CWE-400

11. Sysax Multi Server 6.99 is vulnerable to Cross Site Scripting (XSS) via the /scgi?sid parameter.CVE-2024-53459Sysax · CVSS 6.1 · 0.3% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.