Skip to content
Noroxi

Filezilla-Project records

14 published records for vendor filezilla-project.

Researcher profile

Entered KEV
1 · 7.1%
Weaponized
3 · 21.4%
Pre-auth RCE
0
With a fix record
42.9%
Median publish → KEV
2949 days

Records by year

  1. 19
  2. 22
  3. 23
  4. 24
  5. 25
  6. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

14 records
  • CVE-2014-0160
    90Now

    The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows rem

    HighCVSS 7.5KEVWeaponizedEPSS 100%

    openssl · opensslApr 7, 2014

  • CVE-2014-0224
    58Plan

    OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, whi

    HighCVSS 7.4WeaponizedEPSS 95%

    openssl · opensslJun 5, 2014

  • CVE-2023-48795
    51Plan

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas

    MediumCVSS 5.9Proof of conceptEPSS 94%

    ssh · sshDec 18, 2023

  • CVE-2006-6565
    37Monitor

    FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to the (1) LIST or (2) N

    MediumCVSS 4.0WeaponizedEPSS 71%

    filezilla-project · filezilla serverDec 15, 2006

  • CVE-2023-53959
    34Monitor

    FileZilla Client 3.63.1 DLL Hijacking via Missing TextShaping.dll

    HighCVSS 8.5No exploitEPSS 1%

    filezilla-project · filezilla clientDec 19, 2025

  • CVE-2019-5429
    32Monitor

    Untrusted search path in FileZilla before 3.41.0-rc1 allows an attacker to gain privileges via a malicious 'fzsftp' binary in the user's hom

    HighCVSS 7.8No exploitEPSS 3%

    filezilla-project · filezilla clientApr 29, 2019

  • CVE-2016-15003
    31Monitor

    FileZilla Client Installer uninstall.exe unquoted search path

    HighCVSS 7.8No exploitEPSS 1%

    filezilla-project · filezilla clientJul 18, 2022

  • CVE-2022-29620
    27Monitor

    FileZilla v3.59.0 allows attackers to obtain cleartext passwords of connected SSH or FTP servers via a memory dump.- NOTE: the vendor does n

    MediumCVSS 6.5No exploitEPSS 2%

    filezilla-project · filezilla clientJun 7, 2022

  • CVE-2019-25683
    27Monitor

    FileZilla 3.40.0 Denial of Service via Local Search

    MediumCVSS 6.9No exploitEPSS 0%

    filezilla-project · filezilla clientApr 5, 2026

  • CVE-2024-31497
    25Monitor

    In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a qui

    MediumCVSS 5.9Proof of conceptEPSS 6%

    putty · puttyApr 15, 2024

  • CVE-2005-0851
    21Monitor

    FileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers to cause a denial of service (infinite loop

    MediumCVSS 5.0Proof of conceptEPSS 2%

    filezilla-project · filezilla serverMay 2, 2005

  • CVE-2005-0850
    21Monitor

    FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS dev

    MediumCVSS 5.0Proof of conceptEPSS 2%

    filezilla-project · filezilla serverMay 2, 2005

  • CVE-2009-0884
    18Monitor

    Buffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified vectors related to SS

    MediumCVSS 4.3Proof of conceptEPSS 3%

    filezilla-project · filezilla serverMar 12, 2009

  • CVE-2015-10003
    17Monitor

    FileZilla Server PORT confused deputy

    MediumCVSS 4.3No exploitEPSS 1%

    filezilla-project · filezilla serverJul 17, 2022