FC
Product
Filezilla Client
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 4Low 0
Watch
Add Filezilla Client to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-53959 | 9.8 | Dec 19 | FileZilla Client 3.63.1 contains a DLL hijacking vulnerability that allows attackers to execute malicious code by placing a crafted TextShaping.dll in the application directory Affected: 3.63.1 |
| CVE-2016-15003 | 7.8 | Jul 18 | A vulnerability has been found in FileZilla Client 3.17.0.0 and classified as problematic Affected: 3.17.0 |
| CVE-2019-5429 | 7.8 | Apr 29 | Untrusted search path in FileZilla before 3.41.0-rc1 allows an attacker to gain privileges via a malicious 'fzsftp' binary in the user's home directory Affected: before 3.41.0 |
| CVE-2022-29620 | 6.5 | Jun 7 | FileZilla v3.59.0 allows attackers to obtain cleartext passwords of connected SSH or FTP servers via a memory dump.- NOTE: the vendor does not consider this a vulnerability Affected: 3.59.0 |
| CVE-2024-31497 | 5.9 | Apr 15 | In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60… Affected: before 3.67.0 |
| CVE-2023-48795 | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… Affected: before 3.66.4 |
| CVE-2019-25683 | 5.5 | Apr 5 | FileZilla 3.40.0 Denial of Service via Local Search Affected: 3.40.0 |
Showing 7
