vsftpd project kayıtları
vsftpd project üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 2 · %40
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %60
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-295 Improper Certificate Validation1
- CWE-400 Uncontrolled Resource Consumption1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
68Bu hafta | CVE-2011-2523Silahlaştırılmış | vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.vsftpd project · vsftpd · CWE-78 | Kritik9,8 | — | %96,1 | 27 Kas 2019 |
40Planlayın | CVE-2011-0762Silahlaştırılmış | The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU cvsftpd project · vsftpd · CWE-400 | Orta4,0 | — | %73,9 | 2 Mar 2011 |
31İzleyin | CVE-2021-30047Kavram kanıtı | VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed.vsftpd project · vsftpd | Yüksek7,5 | — | %3,2 | 22 Ağu 2023 |
30İzleyin | CVE-2021-3618İstismar yok | ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatibf5 · nginx · CWE-295 | Yüksek7,4 | — | %2,0 | 23 Mar 2022 |
22İzleyin | CVE-2015-1419Kavram kanıtı | Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to opensuse · opensuse | Orta5,0 | — | %6,7 | 28 Oca 2015 |
- CVE-2011-252368Bu hafta
vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.
KritikCVSS 9,8SilahlaştırılmışEPSS %96vsftpd project · vsftpd27 Kas 2019
- CVE-2011-076240Planlayın
The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service (CPU c
OrtaCVSS 4,0SilahlaştırılmışEPSS %73vsftpd project · vsftpd2 Mar 2011
- CVE-2021-3004731İzleyin
VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number of connections allowed.
YüksekCVSS 7,5Kavram kanıtıEPSS %3vsftpd project · vsftpd22 Ağu 2023
- CVE-2021-361830İzleyin
ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatib
YüksekCVSS 7,4İstismar yokEPSS %2f5 · nginx23 Mar 2022
- CVE-2015-141922İzleyin
Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to
OrtaCVSS 5,0Kavram kanıtıEPSS %6opensuse · opensuse28 Oca 2015