İçeriğe atla
Noroxi

wftpserver kayıtları

wftpserver üreticisine ait 22 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
2 · %9,1
Silahlaştırılmış
3 · %13,6
Pre-auth RCE
2
Düzeltme kaydı olan
%4,5
Yayından KEV’e ortanca
127 gün

Yıllara göre kayıt

  1. 20
  2. 21
  3. 23
  4. 25
  5. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

22 kayıt
  • CVE-2025-47812
    98Hemen

    In Wing FTP Server before 7.4.4.

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %93

    wftpserver · wing ftp server10 Tem 2025

  • CVE-2025-47813
    66Bu hafta

    loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UI

    OrtaCVSS 4,3KEVSilahlaştırılmışEPSS %63

    wftpserver · wing ftp server10 Tem 2025

  • CVE-2009-0351
    38İzleyin

    Stack-based buffer overflow in WFTPSRV.exe in WinFTP 2.3.0 allows remote authenticated users to execute arbitrary code via a long LIST argum

    KritikCVSS 9,0Kavram kanıtıEPSS %5

    wftpserver · winftp ftp server29 Oca 2009

  • CVE-2026-44403
    35İzleyin

    Wing FTP Server < 8.1.3 Authenticated Remote Code Execution via Session Serialization

    YüksekCVSS 8,6Kavram kanıtıEPSS %2

    wftpserver · wing ftp server12 May 2026

  • CVE-2023-37881
    35İzleyin

    Weak Access Control between Domains in Wing FTP Server <= 7.2.0

    YüksekCVSS 8,8İstismar yokEPSS %1

    wftpserver · wing ftp server12 Eyl 2023

  • CVE-2023-37878
    35İzleyin

    Insecure Default Permissions in Wing FTP Server <= 7.2.0

    YüksekCVSS 8,8İstismar yokEPSS %1

    wftpserver · wing ftp server12 Eyl 2023

  • CVE-2025-27889
    35İzleyin

    Wing FTP Server before 7.4.4 does not properly validate and sanitize the url parameter of the downloadpass.html endpoint, allowing injection

    YüksekCVSS 8,8İstismar yokEPSS %0

    wftpserver · wing ftp server10 Tem 2025

  • CVE-2020-37032
    34İzleyin

    Wing FTP Server 6.3.8 - Remote Code Execution

    YüksekCVSS 8,6İstismar yokEPSS %1

    wftpserver · wing ftp server30 Oca 2026

  • CVE-2019-25267
    34İzleyin

    Wing FTP Server 6.0.7 - Unquoted Service Path

    YüksekCVSS 8,5İstismar yokEPSS %0

    wftpserver · wing ftp server4 Şub 2026

  • CVE-2020-8635
    31İzleyin

    Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation directories and configuration files.

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    wftpserver · wing ftp server6 Mar 2020

  • CVE-2020-9470
    31İzleyin

    An issue was discovered in Wing FTP Server 6.2.5 before February 2020.

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    wftpserver · wing ftp server6 Mar 2020

  • CVE-2020-8634
    31İzleyin

    Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on files modified within the HTTP file management interface,

    YüksekCVSS 7,8İstismar yokEPSS %0

    wftpserver · wing ftp server6 Mar 2020

  • CVE-2025-5196
    30İzleyin

    Wing FTP Server Lua Admin Console unnecessary privileges

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    wftpserver · wing ftp server26 May 2025

  • CVE-2023-37879
    30İzleyin

    Exposed Session Variable in Wing FTP Server <= 7.2.0

    YüksekCVSS 7,5İstismar yokEPSS %1

    wftpserver · wing ftp server12 Eyl 2023

  • CVE-2015-4108
    28İzleyin

    Multiple cross-site request forgery (CSRF) vulnerabilities in Wing FTP Server before 4.4.7 allow remote attackers to hijack the authenticati

    OrtaCVSS 6,8İstismar yokEPSS %2

    wftpserver · wing ftp server10 Haz 2015

  • CVE-2012-4729
    28İzleyin

    Wing FTP Server before 4.1.1 allows remote authenticated users to cause a denial of service (daemon crash) via two zip commands.

    OrtaCVSS 6,8İstismar yokEPSS %2

    wftpserver · wing ftp server26 Eki 2012

  • CVE-2025-47811
    27İzleyin

    In Wing FTP Server through 7.4.4, the administrative web interface (listening by default on port 5466) runs as root or SYSTEM by default.

    OrtaCVSS 6,6İstismar yokEPSS %5

    wftpserver · wing ftp server10 Tem 2025

  • CVE-2020-27735
    26İzleyin

    An XSS issue was discovered in Wing FTP 6.4.4.

    OrtaCVSS 6,1Kavram kanıtıEPSS %6

    wftpserver · wing ftp server26 Oca 2021

  • CVE-2023-37875
    21İzleyin

    Cross-Site Scripting Vulnerability in Wing FTP Server <= 7.2.0

    OrtaCVSS 5,4İstismar yokEPSS %0

    wftpserver · wing ftp server12 Eyl 2023

  • CVE-2008-5666
    20İzleyin

    WinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users to cause a denial of service via a sequence

    DüşükCVSS 3,5SilahlaştırılmışEPSS %21

    wftpserver · winftp ftp server18 Ara 2008

  • CVE-2020-37079
    20İzleyin

    Wing FTP Server < 6.2.7 - Cross-site Request Forgery

    OrtaCVSS 5,1İstismar yokEPSS %0

    wftpserver · wing ftp server6 Şub 2026

  • CVE-2010-2428
    18İzleyin

    Cross-site scripting (XSS) vulnerability in admin_loginok.html in the Administrator web interface in Wing FTP Server for Windows 3.5.0 and e

    OrtaCVSS 4,3İstismar yokEPSS %2

    wftpserver · wing ftp server24 Haz 2010