Lucene search
K

225 matches found

EUVD
EUVD
added 2026/04/05 9:30 p.m.2 views

EUVD-2019-20105

Core FTP 2.0 build 653 contains a denial of service vulnerability in the PBSZ command that allows unauthenticated attackers to crash the service by sending a malformed command with an oversized buffer. Attackers can send a PBSZ command with a payload exceeding 211 bytes to trigger an access...

8.7CVSS5.9AI score0.00238EPSS
Exploits1References5
NVD
NVD
added 2026/04/05 9:16 p.m.1 views

CVE-2019-25686

Core FTP 2.0 build 653 contains a denial of service vulnerability in the PBSZ command that allows unauthenticated attackers to crash the service by sending a malformed command with an oversized buffer. Attackers can send a PBSZ command with a payload exceeding 211 bytes to trigger an access...

8.7CVSS0.00238EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/04/05 8:45 p.m.0 views

CVE-2019-25686

Core FTP 2.0 build 653 contains a denial of service vulnerability in the PBSZ command that allows unauthenticated attackers to crash the service by sending a malformed command with an oversized buffer. Attackers can send a PBSZ command with a payload exceeding 211 bytes to trigger an access...

8.7CVSS5.9AI score0.00238EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2026/04/05 8:45 p.m.2 views

CVE-2019-25686

Core FTP 2.0 build 653 is affected by an unauthenticated denial-of-service in the PBSZ command. A malformed PBSZ payload exceeding 211 bytes can trigger an access violation and crash the FTP server process. No remediation or fix version is provided in the supplied documents.

8.7CVSS5.9AI score0.00238EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/05 8:45 p.m.4 views

CVE-2019-25686 Core FTP 2.0 build 653 PBSZ Unauthenticated Denial of Service

Core FTP 2.0 build 653 contains a denial of service vulnerability in the PBSZ command that allows unauthenticated attackers to crash the service by sending a malformed command with an oversized buffer. Attackers can send a PBSZ command with a payload exceeding 211 bytes to trigger an access...

8.7CVSS5.9AI score0.00238EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2026/04/05 12:0 a.m.0 views

PT-2026-30494

Core FTP 2.0 build 653 contains a denial of service vulnerability in the PBSZ command that allows unauthenticated attackers to crash the service by sending a malformed command with an oversized buffer. Attackers can send a PBSZ command with a payload exceeding 211 bytes to trigger an access...

8.7CVSS5.9AI score0.00238EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/04/05 12:0 a.m.2 views

Core FTP 访问控制错误漏洞

Core FTP is a file transfer server. Version Core FTP 2.0 build 653 has a vulnerability related to access control. This vulnerability stems from a denial-of-service vulnerability in the PBSZ command, which could allow unverified attackers to cause the service to crash...

8.7CVSS5.8AI score0.00238EPSS
Exploits1References4
EUVD
EUVD
added 2026/03/30 12:32 p.m.0 views

EUVD-2019-20046

Core FTP/SFTP Server 1.2 contains a buffer overflow vulnerability that allows attackers to crash the service by supplying an excessively long string in the User domain field. Attackers can paste a malicious payload containing 7000 bytes of data into the domain configuration to trigger an...

8.7CVSS6.1AI score0.00076EPSS
Exploits1References5
NVD
NVD
added 2026/03/30 12:16 p.m.0 views

CVE-2019-25654

Core FTP/SFTP Server 1.2 contains a buffer overflow vulnerability that allows attackers to crash the service by supplying an excessively long string in the User domain field. Attackers can paste a malicious payload containing 7000 bytes of data into the domain configuration to trigger an...

8.7CVSS0.00076EPSS
Exploits1References4
CVE
CVE
added 2026/03/30 11:2 a.m.2 views

CVE-2019-25654

CVE-2019-25654 affects Core FTP/SFTP Server 1.2. The vulnerability is a buffer overflow in the domain field under User configuration, allowing a crafted 7000-byte payload to crash the service and cause denial of service (availability impact). Public metrics list CVSS v3.1 base score 7.5 (HIGH) wi...

8.7CVSS6.1AI score0.00076EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/30 11:2 a.m.0 views

CVE-2019-25654 Core FTP/SFTP Server 1.2 Denial of Service via Buffer Overflow

Core FTP/SFTP Server 1.2 contains a buffer overflow vulnerability that allows attackers to crash the service by supplying an excessively long string in the User domain field. Attackers can paste a malicious payload containing 7000 bytes of data into the domain configuration to trigger an...

8.7CVSS6.1AI score0.00076EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/03/30 11:2 a.m.17 views

CVE-2019-25654 Core FTP/SFTP Server 1.2 Denial of Service via Buffer Overflow

Core FTP/SFTP Server 1.2 contains a buffer overflow vulnerability that allows attackers to crash the service by supplying an excessively long string in the User domain field. Attackers can paste a malicious payload containing 7000 bytes of data into the domain configuration to trigger an...

8.7CVSS0.00076EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/03/30 12:0 a.m.2 views

Core FTP/SFTP Server 缓冲区错误漏洞

Core FTP/SFTP Server is a file transfer server software developed by Core FTP Corporation. Version 1.2 of Core FTP/SFTP Server contains a buffer error vulnerability. This vulnerability stems from a buffer overflow in the user domain field, which could allow attackers to cause the service to crash...

8.7CVSS6.1AI score0.00076EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2026/02/08 1:21 a.m.2 views

CVE-2020-37107

Core FTP LE 2.2 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the account field with a large buffer. Attackers can create a text file with 20,000 repeated characters and paste it into the account field to cause the application to become...

7.5CVSS5.3AI score0.00013EPSS
Exploits0References1
NVD
NVD
added 2026/02/07 12:15 a.m.4 views

CVE-2020-37155

Core FTP Lite 1.3 contains a buffer overflow vulnerability in the username input field that allows attackers to crash the application by supplying oversized input. Attackers can generate a 7000-byte payload of repeated 'A' characters to trigger an application crash without requiring additional...

7.5CVSS0.00014EPSS
Exploits0References3
NVD
NVD
added 2026/02/07 12:15 a.m.4 views

CVE-2020-37107

Core FTP LE 2.2 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the account field with a large buffer. Attackers can create a text file with 20,000 repeated characters and paste it into the account field to cause the application to become...

7.5CVSS0.00013EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/02/07 12:0 a.m.2 views

Core FTP LE 安全漏洞

Core FTP LE is an FTP client software developed by Core FTP Corporation. Version 2.2 of Core FTP LE contains a security vulnerability, which stems from a large buffer overflow in the account field. This vulnerability could potentially cause the application to crash...

7.5CVSS6AI score0.00013EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/02/06 11:14 p.m.27 views

CVE-2020-37155 Core FTP Lite 1.3 - Denial of Service (PoC)

Core FTP Lite 1.3 contains a buffer overflow vulnerability in the username input field that allows attackers to crash the application by supplying oversized input. Attackers can generate a 7000-byte payload of repeated 'A' characters to trigger an application crash without requiring additional...

7.5CVSS0.00014EPSS
Exploits0References3
CVE
CVE
added 2026/02/06 11:14 p.m.3 views

CVE-2020-37155

Core FTP Lite 1.3 is affected by a buffer overflow in the username input field that can crash the application. A ~7000-byte payload of repeated 'A' characters is sufficient for exploitation, with no user interaction required and no additional interaction needed. Public details do not include a co...

7.5CVSS5.7AI score0.00014EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/06 11:14 p.m.2 views

CVE-2020-37155

Core FTP Lite 1.3 contains a buffer overflow vulnerability in the username input field that allows attackers to crash the application by supplying oversized input. Attackers can generate a 7000-byte payload of repeated 'A' characters to trigger an application crash without requiring additional...

7.5CVSS5.7AI score0.00014EPSS
Exploits0References3
Rows per page
Query Builder