Approved changes feed: RSS · Atom

cpe:2.3:a:filezilla:filezilla:2.2.14b:*:*:*:*:*:*:*

part: a version: 2.2.14b update: *

VendorFilezilla (3dfc2d40-9044-504b-91f6-ed127185aa79)
ProductFilezilla (776c33db-8387-56fd-9e12-04f20f215fb6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-2403 vulnerable 2026-06-08 04:49:06.506877 Details available
Buffer overflow in FileZilla before 2.2.23 allows remote attackers to execute arbitrary commands via unknown attack vectors.
Published: 2006-05-16T01:00:00.000Z
Updated: 2024-08-07T17:51:04.303Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2898 vulnerable 2026-06-08 04:48:30.837515 Details available
NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Use secure mode" is disabled, uses a weak encryption scheme to store the user's password in the configuration settings file, which allows local users to obtain sensitive information. NOTE: the vendor has disputed the issue, stating that "the problem is not a vulnerability at all, but in fact a fundamental issue of every single program that can store passwords transparently.
Published: 2005-09-14T04:00:00.000Z
Updated: 2024-08-07T22:53:30.281Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.