Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
hfiref0x records in CISA KEVNo hfiref0x vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 68
A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00529 · Published 2023-01-21 · No fix listed CWE-362
Priority MEDIUM 62
A buffer overflow in the g_cfg.MaxUsers component of LightFTP v2.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00349 · Published 2025-12-01 · No fix listed CWE-120
Priority MEDIUM 48
LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services or a remote code execution.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03379 · Published 2017-11-17 · No fix listed CWE-119
