Read the docs

Xlightftpd

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Xlightftpd records in CISA KEV

No Xlightftpd vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Xlight Ftp Server 5 records HIGH Xlight Ftp 1 record MEDIUM

Records

5 records in Xlight Ftp Server · all components

TI-2024-00677 CVE-2024-0737 · GHSA-hjcg-5cvw-69qv

Xlightftpd Xlight FTP Server Login denial of service

Priority HIGH 72

A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04195 Published 2024-01-19 No fix listed CWE-404
TI-2019-15734 CVE-2019-25681 · GHSA-x9m5-f2h9-hrgh

Xlight FTP Server 3.9.1 SEH Overwrite Buffer Overflow

Priority HIGH 72

Xlight FTP Server 3.9.1 contains a structured exception handler (SEH) overwrite vulnerability that allows local attackers to crash the application and overwrite SEH pointers by supplying a crafted buffer string.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00212 Published 2026-04-05 No fix listed CWE-787
TI-2009-04551 CVE-2009-4795 · GHSA-4m4q-9cc6-g4mh

Multiple SQL injection vulnerabilities in Xlight FTP Server before 3.2.1, when ODBC…

Priority LOW 34

Multiple SQL injection vulnerabilities in Xlight FTP Server before 3.2.1, when ODBC authentication is enabled, allow remote attackers to execute arbitrary SQL commands via the (1) USER (aka username) or (2) PASS (aka pas…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02027 Published 2010-04-22 No fix listed CWE-89
TI-2010-02585 CVE-2010-2695 · GHSA-vp6q-h4rp-4q4g

Directory traversal vulnerability in the SFTP/SSH2 virtual server in Xlight FTP Server…

Priority LOW 33

Directory traversal vulnerability in the SFTP/SSH2 virtual server in Xlight FTP Server 3.5.0, 3.5.5, and possibly other versions before 3.6 allows remote authenticated users to read, overwrite, or delete arbitrary files…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01878 Published 2010-07-12 No fix listed CWE-22
Open these records in search →