GCVE - cpe:2.3:a:flexense:syncbreeze:*:*:*:*:enterprise:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:flexense:syncbreeze:*:*:*:*:enterprise:*:*:*

part: a version: * update: *

Vendor	Flexense (`0cbcbab9-d7d0-546e-93f4-bdd36a312974`)
Product	Syncbreeze (`0ff00716-2be6-5485-a63e-acd4363ac61b`)
Edition	*
Language	*
Software edition	enterprise
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-10563`	vulnerable	2026-06-03 14:37:53.502484	Details available An XSS in Flexense SyncBreeze affects all versions (tested from SyncBreeze Enterprise from v10.1 to v10.7). Published: 2018-05-02T21:00:00.000Z Updated: 2024-08-05T07:39:08.412Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2018/May/4 http://blog.n0ipr0cs.io/post/2018/04/29/XSS-Flexense-DiskBoss-Enterprise-all-versions	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-17996`	vulnerable	2026-06-03 14:36:56.127514	Details available A buffer overflow vulnerability in "Add command" functionality exists in Flexense SyncBreeze Enterprise <= 10.3.14. The vulnerability can be triggered by an authenticated attacker who submits more than 5000 characters as the command name. It will cause termination of the SyncBreeze Enterprise server and possibly remote command execution with SYSTEM privilege. Published: 2018-02-06T16:00:00.000Z Updated: 2024-08-05T21:06:49.950Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2018/Feb/10 http://www.ryantzj.com/flexense-syncbreeze-entreprise-10314-buffer-overflow-seh-bypass.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-17088`	vulnerable	2026-06-03 14:36:53.908122	Details available The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial of Service vulnerability. The web server does not check bounds when reading server requests in the Host header on making a connection, resulting in a classic Buffer Overflow that causes a Denial of Service. Published: 2017-12-19T15:00:00.000Z Updated: 2024-08-05T20:43:59.451Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/43344/ http://seclists.org/fulldisclosure/2017/Dec/45 http://packetstormsecurity.com/files/145435/Sync-Breeze-10.2.12-Denial-Of-Service.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.