FI
Vendor
Filezilla-project
15
CVEs
1
On KEV
0
New 30D
Products
FS7.5
Filezilla Server
Filezilla-project
7 CVEs1 on KEV0 new
FC9.8
Filezilla Client
Filezilla-project
7 CVEs0 on KEV0 new
FI5.5
FileZilla
Filezilla-Project
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2019-25683 | FI FileZilla Filezilla-Project | 5.5 | Apr 5 | FileZilla 3.40.0 Denial of Service via Local Search |
| CVE-2023-53959 | FC Filezilla Client Filezilla-project | 9.8 | Dec 19 | FileZilla Client 3.63.1 contains a DLL hijacking vulnerability that allows attackers to execute malicious code by placing a crafted TextShaping.dll in the application directory |
| CVE-2024-31497 | FC Filezilla Client Filezilla-project | 5.9 | Apr 15 | In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60… |
| CVE-2023-48795 | FC Filezilla Client Filezilla-project | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… |
| CVE-2016-15003 | FC Filezilla Client Filezilla-project | 7.8 | Jul 18 | A vulnerability has been found in FileZilla Client 3.17.0.0 and classified as problematic |
| CVE-2015-10003 | FS Filezilla Server Filezilla-project | 4.3 | Jul 17 | A vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50 |
| CVE-2022-29620 | FC Filezilla Client Filezilla-project | 6.5 | Jun 7 | FileZilla v3.59.0 allows attackers to obtain cleartext passwords of connected SSH or FTP servers via a memory dump.- NOTE: the vendor does not consider this a vulnerability |
| CVE-2019-5429 | FC Filezilla Client Filezilla-project | 7.8 | Apr 29 | Untrusted search path in FileZilla before 3.41.0-rc1 allows an attacker to gain privileges via a malicious 'fzsftp' binary in the user's home directory |
| CVE-2014-0224 | FS Filezilla Server Filezilla-project | 7.4 | Jun 5 | OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers… |
| CVE-2014-0160 In wildKEV | FS Filezilla Server Filezilla-project | 7.5 | Apr 7 | OpenSSL Information Disclosure Vulnerability |
| CVE-2009-0884 | FS Filezilla Server Filezilla-project | – | Mar 12 | Buffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified vectors related to SSL/TLS packets |
| CVE-2006-6565 | FS Filezilla Server Filezilla-project | – | Dec 15 | FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to the (1) LIST or (2) NLST commands, which results in a NULL… |
| CVE-2005-0851 | FS Filezilla Server Filezilla-project | – | May 2 | FileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers to cause a denial of service (infinite loop) via certain file uploads or directory… |
| CVE-2005-0850 | FS Filezilla Server Filezilla-project | – | May 2 | FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS device name such as CON, NUL, COM1, LPT1,… |