FS
Product
Filezilla Server
On CISA KEVExploited in the wild
7
CVEs
1
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add Filezilla Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-0160 In wildKEV | 7.5 | Apr 7 | OpenSSL Information Disclosure Vulnerability Affected: before 0.9.44 |
| CVE-2014-0224 | 7.4 | Jun 5 | OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers… Affected: before 0.9.45 |
| CVE-2015-10003 | 4.3 | Jul 17 | A vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50 Affected: before 0.9.51 |
| CVE-2009-0884 | – | Mar 12 | Buffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified vectors related to SSL/TLS packets Affected: before 0.9.31 |
| CVE-2006-6565 | – | Dec 15 | FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to the (1) LIST or (2) NLST commands, which results in a NULL… Affected: before 0.9.22 |
| CVE-2005-0851 | – | May 2 | FileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers to cause a denial of service (infinite loop) via certain file uploads or directory… Affected: before 0.9.6 |
| CVE-2005-0850 | – | May 2 | FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS device name such as CON, NUL, COM1, LPT1,… Affected: before 0.9.6 |
Showing 7