Skip to content
Noroxi

Coreftp records

19 published records for vendor coreftp.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
5
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 21
  4. 22
  5. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

19 records
  • CVE-2018-12113
    41Plan

    Core FTP LE version 2.2 Build 1921 is prone to a buffer overflow vulnerability that may result in a DoS or remote code execution via a PASV

    CriticalCVSS 9.8No exploitEPSS 7%

    coreftp · core ftpJul 5, 2018

  • CVE-2009-3484
    39Monitor

    Stack-based buffer overflow in Core FTP 2.1 build 1612 allows user-assisted remote attackers to execute arbitrary code via a long hostname i

    CriticalCVSS 9.3Proof of conceptEPSS 6%

    coreftp · core ftpSep 30, 2009

  • CVE-2020-19596
    39Monitor

    Buffer overflow vulnerability in Core FTP Server v1.2 Build 583, via a crafted username.

    CriticalCVSS 9.8No exploitEPSS 1%

    coreftp · core ftpApr 5, 2021

  • CVE-2013-3930
    38Monitor

    Stack-based buffer overflow in Core FTP before 2.2 build 1785 allows remote FTP servers to execute arbitrary code via a crafted directory na

    CriticalCVSS 9.3No exploitEPSS 3%

    coreftp · core ftpApr 4, 2014

  • CVE-2019-25654
    34Monitor

    Core FTP/SFTP Server 1.2 Denial of Service via Buffer Overflow

    HighCVSS 8.7No exploitEPSS 1%

    coreftp · core ftpMar 30, 2026

  • CVE-2019-25686
    34Monitor

    Core FTP 2.0 build 653 PBSZ Unauthenticated Denial of Service

    HighCVSS 8.7No exploitEPSS 0%

    coreftp · core ftpApr 5, 2026

  • CVE-2018-20658
    33Monitor

    The server in Core FTP 2.0 build 653 on 32-bit platforms allows remote attackers to cause a denial of service (daemon crash) via a crafted X

    HighCVSS 7.5Proof of conceptEPSS 8%

    coreftp · core ftpJan 2, 2019

  • CVE-2014-1215
    31Monitor

    Multiple buffer overflows in Core FTP Server before 1.2 build 508 allow local users to gain privileges via vectors related to reading data f

    HighCVSS 7.8No exploitEPSS 0%

    coreftp · core ftpMar 20, 2018

  • CVE-2020-19595
    30Monitor

    Buffer overflow vulnerability in Core FTP Server v2 Build 697, via a crafted username.

    HighCVSS 7.5No exploitEPSS 1%

    coreftp · core ftpApr 5, 2021

  • CVE-2022-22836
    28Monitor

    CoreFTP Server before 727 allows directory traversal (for file creation) by an authenticated attacker via ../ in an HTTP PUT request.

    MediumCVSS 6.5Proof of conceptEPSS 5%

    coreftp · core ftpJan 10, 2022

  • CVE-2019-9649
    25Monitor

    An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674.

    MediumCVSS 5.3Proof of conceptEPSS 15%

    coreftp · core ftpMar 22, 2019

  • CVE-2019-9648
    25Monitor

    An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674.

    MediumCVSS 5.3Proof of conceptEPSS 14%

    coreftp · core ftpMar 22, 2019

  • CVE-2014-4643
    23Monitor

    Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service (appl

    MediumCVSS 5.0Proof of conceptEPSS 9%

    coreftp · core ftpJun 25, 2014

  • CVE-2022-22899
    22Monitor

    Core FTP / SFTP Server v2 Build 725 was discovered to allow unauthenticated attackers to cause a Denial of Service (DoS) via a crafted packe

    MediumCVSS 5.5No exploitEPSS 1%

    coreftp · core ftpFeb 17, 2022

  • CVE-2020-21588
    22Monitor

    Buffer overflow in Core FTP LE v2.2 allows local attackers to cause a denial or service (crash) via a long string in the Setup->Users->Usern

    MediumCVSS 5.5No exploitEPSS 0%

    coreftp · core ftpApr 2, 2021

  • CVE-2013-0130
    21Monitor

    Multiple buffer overflows in Core FTP before 2.2 build 1769 allow remote FTP servers to execute arbitrary code or cause a denial of service

    MediumCVSS 5.1No exploitEPSS 2%

    coreftp · coreftpMar 29, 2013

  • CVE-2014-1441
    18Monitor

    Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service (reachable assertion and crash) via an AUTH SSL co

    MediumCVSS 4.3No exploitEPSS 2%

    coreftp · core ftpMay 1, 2014

  • CVE-2014-1442
    17Monitor

    Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of ar

    MediumCVSS 4.0No exploitEPSS 2%

    coreftp · core ftpMay 1, 2014

  • CVE-2014-1443
    17Monitor

    Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information (password for the previous user) via

    MediumCVSS 4.0No exploitEPSS 2%

    coreftp · core ftpMay 1, 2014