What’s Vulnerable › Products

ikus060/rdiffweb vulnerabilities

44 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your ikus060/rdiffweb version is affected

Latest ikus060/rdiffweb vulnerabilities

• CVE-2026-109119 — Missing Authorization in rdiffweb (CVSS 8.8)
• CVE-2026-109118 — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in rdiffweb (CVSS 4.6)
• CVE-2023-5289 — Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb (CVSS 8.8)
• CVE-2023-4138 — Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb (CVSS 6.5)
• CVE-2022-4724 — Improper Access Control in ikus060/rdiffweb (CVSS 9.8)
• CVE-2022-4723 — Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb (CVSS 6.5)
• CVE-2022-4722 — Authentication Bypass by Primary Weakness in ikus060/rdiffweb (CVSS 7.2)
• CVE-2022-4721 — Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in ikus060/rdiffweb (CVSS 5.4)
• CVE-2022-4720 — Open Redirect in ikus060/rdiffweb (CVSS 6.1)
• CVE-2022-4719 — Business Logic Errors in ikus060/rdiffweb (CVSS 9.8)
• CVE-2022-4646 — Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb (CVSS 6.5)
• CVE-2022-4644 — Open Redirect in ikus060/rdiffweb (CVSS 6.1)
• CVE-2022-4314 — Improper Privilege Management in ikus060/rdiffweb (CVSS 9.8)
• CVE-2022-4018 — Missing Authentication for Critical Function in ikus060/rdiffweb (CVSS 4.3)
• CVE-2022-3362 — Insufficient Session Expiration in ikus060/rdiffweb (CVSS 9.8)
• CVE-2022-3363 — Business Logic Errors in ikus060/rdiffweb (CVSS 9.8)
• CVE-2022-3327 — Missing Authentication for Critical Function in ikus060/rdiffweb (CVSS 9.8)
• CVE-2022-3439 — Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb (CVSS 9.8)
• CVE-2022-3457 — Origin Validation Error in ikus060/rdiffweb (CVSS 9.8)
• CVE-2022-3456 — Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb (CVSS 9.8)
• CVE-2022-3438 — Open Redirect in ikus060/rdiffweb (CVSS 6.1)
• CVE-2022-3389 — Path Traversal in ikus060/rdiffweb (CVSS 7.5)
• CVE-2022-3376 — Weak Password Requirements in ikus060/rdiffweb (CVSS 5.3)
• CVE-2022-3273 — Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb (CVSS 9.8)
• CVE-2022-3371 — No limit in length of "Token name" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb (CVSS 7.5)