Filezilla

11 CVEs across 5 Filezilla products. Browse Filezilla vulnerabilities, severities, and proof-of-concept exploits.

Filezilla products with known CVEs

ProductCVEs
Filezilla7
Client1
Filezilla Server1
Filezilla Server Terminal1
Server1
Filezilla CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2016-15003Medium6.32022-07-18A vulnerability has been found in FileZilla Client 3.17.0.0 and classified as problematic. This vulnerability affects unknown code of the file C:\Program Files…
CVE-2015-10003Medium4.32022-07-17A vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50. This affects an unknown part of the component PORT Handler. T…
CVE-2019-5429High7.82019-04-29Untrusted search path in FileZilla before 3.41.0-rc1 allows an attacker to gain privileges via a malicious 'fzsftp' binary in the user's home directory.
CVE-2007-23182007-04-26Multiple format string vulnerabilities in FileZilla before 2.2.32 allow remote attackers to execute arbitrary code via format string specifiers in (1) FTP serv…
CVE-2007-03172007-01-18Format string vulnerability in the LogMessage function in FileZilla before 3.0.0-beta5 allows remote attackers to cause a denial of service (application crash)…
CVE-2007-03152007-01-18Multiple buffer overflows in FileZilla before 2.2.30a allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via uns…
CVE-2006-65642006-12-15FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a malformed argument to the STOR command, which results in a NU…
CVE-2006-24032006-05-16Buffer overflow in FileZilla before 2.2.23 allows remote attackers to execute arbitrary commands via unknown attack vectors.
CVE-2006-21732006-05-04Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbitrary code via a lon…
CVE-2005-35892005-11-16Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal crash) via a long USER ftp command.
CVE-2005-28982005-09-14NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Use secure mode" is disabled, uses a weak…