GCVE - cpe:2.3:a:flexsense:diskboss:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:flexsense:diskboss:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Flexsense (`cfdd4799-ddd6-5197-9884-7bea75014b96`)
Product	Diskboss (`0d2c5d8d-8f70-5a03-aaee-d61927841dad`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-36882`	vulnerable	2026-06-08 05:25:49.775202	Flexsense DiskBoss Application Crash Denial of Service Flexsense DiskBoss 7.7.14 allows unauthenticated attackers to upload arbitrary files via /Command/Search Files/Directory field, leading to a denial of service by crashing the application. Published: 2025-12-05T17:33:40.576Z Updated: 2025-12-08T20:04:34.449Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/48276 https://www.diskboss.com/ https://github.com/x00x00x00x00/diskboss_7.7.14/raw/master/diskboss_setup_v7.7.14.exe https://www.vulncheck.com/advisories/flexsense-diskboss-denial-of-service-by-crashing-the-application	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-36881`	vulnerable	2026-06-08 05:25:49.774810	Flexsense DiskBoss 'Add Input Directory' Buffer Overflow Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Input Directory' component that allows unauthenticated attackers to execute arbitrary code on the system. Attackers can exploit this by pasting a specially crafted directory path into the 'Add Input Directory' field. Published: 2025-12-05T17:20:41.496Z Updated: 2025-12-08T20:13:17.192Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/48279 https://www.diskboss.com/ https://github.com/x00x00x00x00/diskboss_7.7.14/raw/master/diskboss_setup_v7.7.14.exe https://github.com/x00x00x00x00/diskboss_7.7.14/raw/master/ https://www.vulncheck.com/advisories/flexsense-diskboss-add-input-directory-buffer-overflow	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-36880`	vulnerable	2026-06-08 05:25:49.772576	Flexsense DiskBoss 'Reports and Data Directory' Buffer Overflow Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Reports and Data Directory' field that allows an attacker to execute arbitrary code on the system. Published: 2025-12-05T17:18:38.902Z Updated: 2026-04-07T14:04:59.128Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/48689 https://www.diskboss.com/ https://www.vulncheck.com/advisories/flexsense-diskboss-reports-and-data-directory-buffer-overflow	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-36879`	vulnerable	2026-06-08 05:25:49.767082	Flexsense DiskBoss Service Unquoted Service Path Vulnerability Flexsense DiskBoss 11.7.28 allows unauthenticated attackers to elevate their privileges using any of its services, enabling remote code execution during startup or reboot with escalated privileges. Attackers can exploit the unquoted service path vulnerability by specifying a malicious service name in the 'sc qc' command, allowing them to execute arbitrary system commands. Published: 2025-12-05T17:18:09.743Z Updated: 2025-12-05T20:08:49.987Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/49022 https://www.diskboss.com/ https://www.diskboss.com/downloads.html https://www.vulncheck.com/advisories/flexsense-diskboss-service-unquoted-service-path-vulnerability	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.