İçeriğe atla
Noroxi

proftpd kayıtları

proftpd üreticisine ait 34 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
3 · %8,8
Pre-auth RCE
5
Düzeltme kaydı olan
%85,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 19
  3. 20
  4. 22
  5. 23
  6. 24
  7. 25
  8. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

34 kayıt
  • CVE-2015-3306
    69Bu hafta

    The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.

    KritikCVSS 10,0SilahlaştırılmışEPSS %97

    proftpd · proftpd18 May 2015

  • CVE-2010-4221
    67Bu hafta

    Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to exe

    KritikCVSS 10,0SilahlaştırılmışEPSS %91

    proftpd · proftpd9 Kas 2010

  • CVE-2019-12815
    56Planlayın

    An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without

    KritikCVSS 9,8Kavram kanıtıEPSS %58

    proftpd · proftpd19 Tem 2019

  • CVE-2023-48795
    51Planlayın

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas

    OrtaCVSS 5,9Kavram kanıtıEPSS %94

    ssh · ssh18 Ara 2023

  • CVE-2011-4130
    40Planlayın

    Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via ve

    KritikCVSS 9,0İstismar yokEPSS %13

    proftpd · proftpd6 Ara 2011

  • CVE-2020-9273
    39İzleyin

    In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel.

    YüksekCVSS 8,8Kavram kanıtıEPSS %12

    proftpd · proftpd20 Şub 2020

  • CVE-2010-20103
    39İzleyin

    ProFTPD 1.3.3c Backdoor Command Execution

    KritikCVSS 9,3SilahlaştırılmışEPSS %5

    proftpd · proftpd20 Ağu 2025

  • CVE-2019-18217
    36İzleyin

    ProFTPD before 1.3.6b and 1.3.7rc before 1.3.7rc2 allows remote unauthenticated denial-of-service due to incorrect handling of overly long c

    YüksekCVSS 7,5Kavram kanıtıEPSS %20

    proftpd · proftpd21 Eki 2019

  • CVE-2026-42167
    34İzleyin

    mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of US

    YüksekCVSS 8,1Kavram kanıtıEPSS %7

    proftpd · proftpd28 Nis 2026

  • CVE-2026-63090
    34İzleyin

    ProFTPD mod_sftp Heap Buffer Overflow via SFTP Packet Reassembly

    YüksekCVSS 8,7İstismar yokEPSS %1

    proftpd · proftpd20 Tem 2026

  • CVE-2026-35025
    34İzleyin

    ProFTPD ACL Bypass via /proc/self/root Path Prefix in RNFR

    YüksekCVSS 8,6İstismar yokEPSS %1

    proftpd · proftpd24 Haz 2026

  • CVE-2001-0136
    33İzleyin

    Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE comman

    OrtaCVSS 5,0Kavram kanıtıEPSS %45

    proftpd · proftpd12 Mar 2001

  • CVE-2004-0346
    33İzleyin

    Off-by-one buffer overflow in _xlate_ascii_write() in ProFTPD 1.2.7 through 1.2.9rc2p allows local users to gain privileges via a 1024 byte

    YüksekCVSS 7,8İstismar yokEPSS %6

    proftpd · proftpd23 Kas 2004

  • CVE-2009-0543
    32İzleyin

    ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded m

    OrtaCVSS 6,8Kavram kanıtıEPSS %16

    proftpd · proftpd12 Şub 2009

  • CVE-2016-3125
    32İzleyin

    The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cau

    YüksekCVSS 7,5İstismar yokEPSS %7

    proftpd · proftpd5 Nis 2016

  • CVE-2023-51713
    31İzleyin

    make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backsla

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    proftpd · proftpd21 Ara 2023

  • CVE-2024-48651
    31İzleyin

    In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplement

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    29 Kas 2024

  • CVE-2020-9272
    31İzleyin

    ProFTPD 1.3.7 has an out-of-bounds (OOB) read vulnerability in mod_cap via the cap_text.c cap_to_text function.

    YüksekCVSS 7,5İstismar yokEPSS %2

    proftpd · proftpd20 Şub 2020

  • CVE-2010-4652
    30İzleyin

    Heap-based buffer overflow in the sql_prepare_where function (contrib/mod_sql.c) in ProFTPD before 1.3.3d, when mod_sql is enabled, allows r

    OrtaCVSS 6,8İstismar yokEPSS %11

    proftpd · proftpd1 Şub 2011

  • CVE-2010-3867
    30İzleyin

    Multiple directory traversal vulnerabilities in the mod_site_misc module in ProFTPD before 1.3.3c allow remote authenticated users to create

    YüksekCVSS 7,1Kavram kanıtıEPSS %8

    proftpd · proftpd9 Kas 2010

  • CVE-2021-46854
    30İzleyin

    mod_radius in ProFTPD before 1.3.7c allows memory disclosure to RADIUS servers because it copies blocks of 16 characters.

    YüksekCVSS 7,5İstismar yokEPSS %1

    proftpd · proftpd23 Kas 2022

  • CVE-2019-19271
    30İzleyin

    An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6.

    YüksekCVSS 7,5İstismar yokEPSS %1

    proftpd · proftpd26 Kas 2019

  • CVE-2019-19270
    30İzleyin

    An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b.

    YüksekCVSS 7,5İstismar yokEPSS %1

    proftpd · proftpd26 Kas 2019

  • CVE-2019-19272
    30İzleyin

    An issue was discovered in tls_verify_crl in ProFTPD before 1.3.6.

    YüksekCVSS 7,5İstismar yokEPSS %1

    proftpd · proftpd26 Kas 2019

  • CVE-2026-53994
    30İzleyin

    ProFTPD mod_sftp Heap Buffer Overflow via Unsigned Integer Underflow and Size Truncation

    YüksekCVSS 7,7İstismar yokEPSS %1

    proftpd · proftpd18 Tem 2026