Vendors / hfiref0x Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now hfiref0x records in CISA KEV No hfiref0x vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 75
LightFTP 2.3.1 contains a residual race condition vulnerability (an incomplete fix for CVE-2024-11144) in the worker_thread_cleanup() function of ftpserv.c that allows remote unauthenticated attackers to destabilize or c…
CVSS 4.0 HIGH 8.2· Network · No auth · No interaction · EPSS 0.00395 · Published 2026-07-31 · No fix listed CWE-367
Priority HIGH 69
LightFTP through 2.4 contains multiple data race vulnerabilities in ftpserv.c that allow anonymous attackers to cause undefined behavior by issuing LIST followed by ABOR commands without authentication.
CVSS 4.0 HIGH 8.2· Network · No auth · No interaction · EPSS 0.00365 · Published 2026-08-06 · No fix listed CWE-820
Priority HIGH 68
A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request.
CVSS 3.1 HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00529 · Published 2023-01-21 · No fix listed CWE-362
Priority MEDIUM 62
A buffer overflow in the g_cfg.MaxUsers component of LightFTP v2.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00349 · Published 2025-12-01 · No fix listed CWE-120
Priority MEDIUM 48
LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services or a remote code execution.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03379 · Published 2017-11-17 · No fix listed CWE-119
Open these records in search → All records by CVSS severity
1 3 1 0 0
THREATIST.IORead the docs