Flexense / Syncbreeze
23 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2020-37100 | Sync Breeze Enterprise 12.4.18 - Unquoted Service Path | HIGH | 8.5 | Feb 3, 2026 |
| CVE-2025-59900 | Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server | MEDIUM | 5.1 | Jan 28, 2026 |
| CVE-2025-59899 | Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server | MEDIUM | 5.1 | Jan 28, 2026 |
| CVE-2025-59898 | Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server | MEDIUM | 5.1 | Jan 28, 2026 |
| CVE-2025-59897 | Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server | MEDIUM | 5.1 | Jan 28, 2026 |
| CVE-2025-59896 | Authenticated Cross-Site Scripting (XSS) vulnerability in Sync Breeze Enterprise Server | MEDIUM | 5.1 | Jan 28, 2026 |
| CVE-2025-59895 | Remote denial-of-service (DoS) vulnerability in Sync Breeze Enterprise Server | HIGH | 8.2 | Jan 28, 2026 |
| CVE-2025-59894 | Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server | HIGH | 8.5 | Jan 28, 2026 |
| CVE-2025-59893 | Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server | HIGH | 8.5 | Jan 28, 2026 |
| CVE-2025-59892 | Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server | HIGH | 8.5 | Jan 28, 2026 |
| CVE-2025-59891 | Cross-Site request forgery (CSRF) vulnerability in Sync Breeze Enterprise Server | HIGH | 8.5 | Jan 28, 2026 |
| CVE-2020-36946 | SyncBreeze 10.0.28 - 'login' Denial of Service | HIGH | 8.7 | Jan 27, 2026 |
| CVE-2018-10563 | An XSS in Flexense SyncBreeze affects all versions (tested from SyncBreeze Enterprise from v10.1 to v10.7). | MEDIUM | 6.1 | May 2, 2018 |
| CVE-2018-8065 | An issue was discovered in the web server in Flexense SyncBreeze Enterprise 10.6.24. There is a user mode write access violation on the syncbrs.exe memory regi… | HIGH | 7.5 | Mar 12, 2018 |
| CVE-2017-17996 | A buffer overflow vulnerability in "Add command" functionality exists in Flexense SyncBreeze Enterprise <= 10.3.14. The vulnerability can be triggered by an au… | HIGH | 8.8 | Feb 6, 2018 |
| CVE-2018-6537 | A buffer overflow vulnerability in the control protocol of Flexense SyncBreeze Enterprise v10.4.18 allows remote attackers to execute arbitrary code by sending… | CRITICAL | 9.8 | Feb 2, 2018 |
| CVE-2017-13696 | A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze Enterprise 9.9.16, a… | CRITICAL | 9.8 | Jan 24, 2018 |
| CVE-2017-15664 | In Flexense Sync Breeze Enterprise v10.1.16, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INF… | HIGH | 7.5 | Jan 10, 2018 |
| CVE-2017-17088 | The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial of Service vulnerability. The web server does not check bounds when rea… | HIGH | 7.5 | Dec 19, 2017 |
| CVE-2017-17099 | There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When sending a GET reque… | HIGH | 7.8 | Dec 3, 2017 |
| CVE-2017-15950 | Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by… | HIGH | 7.8 | Oct 31, 2017 |
| CVE-2017-14980 | Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login. | CRITICAL | 9.8 | Oct 9, 2017 |
| CVE-2017-7310 | A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy befo… | HIGH | 7.8 | Mar 29, 2017 |
Showing 1 to 23 of 23 CVEs