RU
Product
Rumpus
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 11Low 0
Watch
Add Rumpus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-55058 | 9.8 | Nov 17 | CWE-20 Improper Input Validation Affected: 9.0.12 |
| CVE-2025-55055 | 9.8 | Nov 17 | CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Affected: 9.0.12 |
| CVE-2025-55057 | 8.8 | Nov 17 | Multiple CWE-352 Cross-Site Request Forgery (CSRF) Affected: 9.0.12 |
| CVE-2022-46368 | 8.8 | Jan 12 | Rumpus - FTP server version 9.0.7.1 Cross-site request forgery (CSRF) – vulnerability may allow unauthorized action on behalf of authenticated users Affected: through 9.0.7.1 |
| CVE-2022-46367 | 8.8 | Jan 12 | Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation vulnerability that may allow privilege escalation Affected: through 9.0.7.1 |
| CVE-2020-27575 | 8.8 | Mar 8 | Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability Affected: 8.2.13; 8.2.14 |
| CVE-2020-27574 | 8.8 | Mar 8 | Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF) Affected: 8.2.13; 8.2.14 |
| CVE-2019-19659 | 8.8 | Feb 10 | A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1 Affected: 8.2.9.1 |
| CVE-2022-46370 | 7.5 | Jan 12 | Rumpus - FTP server version 9.0.7.1 Improper Token Verification– vulnerability may allow bypassing identity verification Affected: through 9.0.7.1 |
| CVE-2020-12737 | 6.5 | May 8 | An issue was discovered in Maxum Rumpus before 8.2.12 on macOS Affected: before 8.2.12 |
| CVE-2019-19665 | 6.5 | Feb 10 | A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1 Affected: 8.2.9.1 |
| CVE-2019-19663 | 6.5 | Feb 10 | A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1 Affected: 8.2.9.1 |
| CVE-2019-19660 | 6.5 | Feb 10 | A CSRF vulnerability exists in the Web File Manager's Network Setting functionality of Rumpus FTP Server 8.2.9.1 Affected: 8.2.9.1 |
| CVE-2025-55059 | 6.1 | Nov 17 | CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Affected: 9.0.12 |
| CVE-2025-55056 | 6.1 | Nov 17 | Multiple CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') Affected: 9.0.12 |
| CVE-2022-39187 | 6.1 | Jan 12 | Rumpus - FTP server version 9.0.7.1 has a Reflected cross-site scripting (RXSS) vulnerability through unspecified vectors Affected: through 9.0.7.1 |
| CVE-2020-8514 | 6.1 | Feb 2 | An issue was discovered in Rumpus 8.2.10 on macOS Affected: 8.2.10 |
| CVE-2019-19368 | 6.1 | Dec 16 | A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1 Affected: 8.2.9.1 |
| CVE-2022-46369 | 5.4 | Jan 12 | Rumpus - FTP server version 9.0.7.1 Persistent cross-site scripting (PXSS) – vulnerability may allow inserting scripts into unspecified input fields Affected: through 9.0.7.1 |
| CVE-2020-27576 | 5.4 | Mar 8 | Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting (XSS) Affected: 8.2.13; 8.2.14 |
| CVE-2008-7078 | – | Aug 25 | Multiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a denial of service (segmentation fault) via a long HTTP verb in the HTTP component; and allow… Affected: through 6.0 |
Showing 21