Approved changes feed: RSS · Atom
cpe:2.3:a:coreftp:core_ftp:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Coreftp (aabbfe17-ab41-5797-a897-94586c34cf32) |
|---|---|
| Product | Core Ftp (6032b3c5-f13c-5d67-9b41-59b3fb73d8c0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-22836 |
vulnerable | 2026-06-08 05:40:55.506056 |
Details available
CoreFTP Server before 727 allows directory traversal (for file creation) by an authenticated attacker via ../ in an HTTP PUT request.
Published: 2022-01-08T22:30:11.000Z
Updated: 2024-08-03T03:28:42.290Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25686 |
vulnerable | 2026-06-08 05:13:42.775725 |
Core FTP 2.0 build 653 PBSZ Unauthenticated Denial of Service
HIGH (7.5)
Core FTP 2.0 build 653 contains a denial of service vulnerability in the PBSZ command that allows unauthenticated attackers to crash the service by sending a malformed command with an oversized buffer. Attackers can send a PBSZ command with a payload exceeding 211 bytes to trigger an access violation and crash the FTP server process.
Published: 2026-04-05T20:45:35.338Z
Updated: 2026-04-06T15:43:16.572Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1215 |
vulnerable | 2026-06-08 05:05:15.952078 |
Details available
Multiple buffer overflows in Core FTP Server before 1.2 build 508 allow local users to gain privileges via vectors related to reading data from config.dat and Windows Registry.
Published: 2018-03-20T21:00:00.000Z
Updated: 2024-08-06T09:34:40.490Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3930 |
vulnerable | 2026-06-08 05:04:33.211067 |
Details available
Stack-based buffer overflow in Core FTP before 2.2 build 1785 allows remote FTP servers to execute arbitrary code via a crafted directory name in a CWD command reply.
Published: 2014-04-04T14:00:00.000Z
Updated: 2024-08-06T16:22:01.495Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.