GCVE - cpe:2.3:a:barracudadrive:barracudadrive:6.7.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:barracudadrive:barracudadrive:6.7.2:*:*:*:*:*:*:*

part: a version: 6.7.2 update: *

Vendor	Barracudadrive (`d2228bc4-633a-5c41-8b47-21af21cdc5a0`)
Product	Barracudadrive (`129c0392-8bdc-5a08-8215-bbb64f582bd3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:docker/johnodon/barracudadrive`	purl2cpe	2026-06-01 10:11:48.504020
`pkg:github/johnodon/barracudadrive`	purl2cpe	2026-06-01 10:11:48.504021

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-4335`	vulnerable	2026-06-08 05:05:44.603688	Details available Multiple cross-site scripting (XSS) vulnerabilities in BarracudaDrive 6.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) host or (2) password parameter to rtl/protected/admin/ddns/. Published: 2014-06-19T14:00:00.000Z Updated: 2024-09-16T17:32:44.611Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/127128/BarracudaDrive-6.7.2-Cross-Site-Scripting.html http://www.securityfocus.com/bid/68079	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3807`	vulnerable	2026-06-08 05:05:42.836108	Details available Multiple cross-site scripting (XSS) vulnerabilities in BarracudaDrive 6.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) blog, (2) bloggeruser, or (3) bloggerpasswd parameter to private/manage/. Published: 2014-05-21T14:00:00.000Z Updated: 2024-09-16T16:49:10.665Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/67428 http://secunia.com/advisories/58712 http://packetstormsecurity.com/files/126645/BarracudaDrive-6.7.2-Cross-Site-Scripting.html	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.