hfiref0x records
3 published records for vendor hfiref0x.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
3 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
40Plan | CVE-2017-1000218No exploit | LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services or a remote code exechfiref0x · lightftp · CWE-119 | Critical9.8 | 3.3%Nov 16, 2017 |
30Monitor | CVE-2023-24042No exploit | A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request.hfiref0x · lightftp · CWE-362 | High7.5 | 0.5%Jan 20, 2023 |
26Monitor | CVE-2025-65403No exploit | A buffer overflow in the g_cfg.MaxUsers component of LightFTP v2.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.hfiref0x · lightftp · CWE-120 | Medium6.5 | 0.3%Dec 1, 2025 |
- CVE-2017-100021840Plan
LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services or a remote code exec
CriticalCVSS 9.8No exploitEPSS 3%hfiref0x · lightftpNov 16, 2017
- CVE-2023-2404230Monitor
A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request.
HighCVSS 7.5No exploitEPSS 0%hfiref0x · lightftpJan 20, 2023
- CVE-2025-6540326Monitor
A buffer overflow in the g_cfg.MaxUsers component of LightFTP v2.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
MediumCVSS 6.5No exploitEPSS 0%hfiref0x · lightftpDec 1, 2025