Filezilla-project Filezilla Server — known CVE vulnerabilities

Every CVE whose affected-product data names Filezilla-project Filezilla Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2014-0160 — CVSS 7.5 (high) — actively exploited: The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows…
• CVE-2014-0224 — CVSS 7.4 (high): OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages…
• CVE-2005-0851 — CVSS 5.0 (medium): FileZilla FTP server before 0.9.6, when using MODE Z (zlib compression), allows remote attackers to cause a denial of service (infinite…
• CVE-2005-0850 — CVSS 5.0 (medium): FileZilla FTP server before 0.9.6 allows remote attackers to cause a denial of service via a request for a filename containing an MS-DOS…
• CVE-2009-0884 — CVSS 4.3 (medium): Buffer overflow in FileZilla Server before 0.9.31 allows remote attackers to cause a denial of service via unspecified vectors related to…
• CVE-2015-10003 — CVSS 4.3 (medium): A vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50. This affects an unknown part of the…
• CVE-2006-6565 — CVSS 4.0 (medium): FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to the (1) LIST or (2)…