Xlightftpd records
7 published records for vendor xlightftpd.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-787 Out-of-bounds Write2
- CWE-121 Stack-based Buffer Overflow1
- CWE-190 Integer Overflow or Wraparound1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-404 Improper Resource Shutdown or Release1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2024-46483Proof of concept | Xlight FTP Server <3.9.4.3 has an integer overflow vulnerability in the packet parsing logic of the SFTP server, which can lead to a heap ovCWE-190 | Critical9.8 | — | 1.1% | Oct 22, 2024 |
34Monitor | CVE-2019-25681No exploit | Xlight FTP Server 3.9.1 SEH Overwrite Buffer Overflowxlightftpd · xlight ftp server · CWE-787 | High8.6 | — | 0.2% | Apr 5, 2026 |
33Monitor | CVE-2022-28998No exploit | Xlight FTP v3.9.3.2 was discovered to contain a stack-based buffer overflow which allows attackers to leak sensitive information via craftedxlightftpd · xlight ftp · CWE-787 | High8.1 | — | 2.1% | May 23, 2022 |
31Monitor | CVE-2024-0737Proof of concept | Xlightftpd Xlight FTP Server Login denial of servicexlightftpd · xlight ftp server · CWE-404 | High7.5 | — | 4.1% | Jan 19, 2024 |
28Monitor | CVE-2009-4795Proof of concept | Multiple SQL injection vulnerabilities in Xlight FTP Server before 3.2.1, when ODBC authentication is enabled, allow remote attackers to exexlightftpd · xlight ftp server · CWE-89 | Medium6.8 | — | 2.0% | Apr 22, 2010 |
27Monitor | CVE-2010-2695No exploit | Directory traversal vulnerability in the SFTP/SSH2 virtual server in Xlight FTP Server 3.5.0, 3.5.5, and possibly other versions before 3.6 xlightftpd · xlight ftp server · CWE-22 | Medium6.5 | — | 1.8% | Jul 12, 2010 |
20Monitor | CVE-2023-53886No exploit | Xlight FTP Server 3.9.3.6 Stack Buffer Overflow Vulnerability via Execute Programxlightftpd · xlight ftp server · CWE-121 | Medium5.1 | — | 0.4% | Dec 15, 2025 |
- CVE-2024-4648339Monitor
Xlight FTP Server <3.9.4.3 has an integer overflow vulnerability in the packet parsing logic of the SFTP server, which can lead to a heap ov
CriticalCVSS 9.8Proof of conceptEPSS 1%Oct 22, 2024
- CVE-2019-2568134Monitor
Xlight FTP Server 3.9.1 SEH Overwrite Buffer Overflow
HighCVSS 8.6No exploitEPSS 0%xlightftpd · xlight ftp serverApr 5, 2026
- CVE-2022-2899833Monitor
Xlight FTP v3.9.3.2 was discovered to contain a stack-based buffer overflow which allows attackers to leak sensitive information via crafted
HighCVSS 8.1No exploitEPSS 2%xlightftpd · xlight ftpMay 23, 2022
- CVE-2024-073731Monitor
Xlightftpd Xlight FTP Server Login denial of service
HighCVSS 7.5Proof of conceptEPSS 4%xlightftpd · xlight ftp serverJan 19, 2024
- CVE-2009-479528Monitor
Multiple SQL injection vulnerabilities in Xlight FTP Server before 3.2.1, when ODBC authentication is enabled, allow remote attackers to exe
MediumCVSS 6.8Proof of conceptEPSS 2%xlightftpd · xlight ftp serverApr 22, 2010
- CVE-2010-269527Monitor
Directory traversal vulnerability in the SFTP/SSH2 virtual server in Xlight FTP Server 3.5.0, 3.5.5, and possibly other versions before 3.6
MediumCVSS 6.5No exploitEPSS 1%xlightftpd · xlight ftp serverJul 12, 2010
- CVE-2023-5388620Monitor
Xlight FTP Server 3.9.3.6 Stack Buffer Overflow Vulnerability via Execute Program
MediumCVSS 5.1No exploitEPSS 0%xlightftpd · xlight ftp serverDec 15, 2025