Lucene search
+L

649 matches found

EUVD
EUVD
•added 2026/01/14 3:23 p.m.•24 views

EUVD-2026-2461

A flaw was found in vsftpd. This vulnerability allows a denial of service DoS via an integer overflow in the ls command parameter parsing, triggered by a remote, authenticated attacker sending a crafted STAT command with a specific byte sequence...

6.5CVSS6.6AI score0.00807EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/01/14 3:23 p.m.•14 views

CVE-2025-14242

A flaw was found in vsftpd. This vulnerability allows a denial of service DoS via an integer overflow in the ls command parameter parsing, triggered by a remote, authenticated attacker sending a crafted STAT command with a specific byte sequence...

6.5CVSS6.6AI score0.00807EPSS
SaveExploits0References15
Cvelist
Cvelist
•added 2026/01/14 3:23 p.m.•42 views

CVE-2025-14242 Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing

A flaw was found in vsftpd. This vulnerability allows a denial of service DoS via an integer overflow in the ls command parameter parsing, triggered by a remote, authenticated attacker sending a crafted STAT command with a specific byte sequence...

6.5CVSS0.00807EPSS
SaveExploits0References14
Vulnrichment
Vulnrichment
•added 2026/01/14 3:23 p.m.•10 views

CVE-2025-14242 Vsftpd: vsftpd: denial of service via integer overflow in ls command parameter parsing

A flaw was found in vsftpd. This vulnerability allows a denial of service DoS via an integer overflow in the ls command parameter parsing, triggered by a remote, authenticated attacker sending a crafted STAT command with a specific byte sequence...

6.5CVSS6.5AI score0.00807EPSS
SaveExploits0References14
Debian CVE
Debian CVE
•added 2026/01/14 3:23 p.m.•11 views

CVE-2025-14242

A flaw was found in vsftpd. This vulnerability allows a denial of service DoS via an integer overflow in the ls command parameter parsing, triggered by a remote, authenticated attacker sending a crafted STAT command with a specific byte sequence...

6.5CVSS6.5AI score0.00807EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/01/14 3:22 p.m.•10 views

CVE-2025-14242

A flaw was found in vsftpd. This vulnerability allows a denial of service DoS via an integer overflow in the ls command parameter parsing, triggered by a remote, authenticated attacker sending a crafted STAT command with a specific byte sequence. Mitigation Mitigation for this issue is either not...

6.5CVSS6.6AI score0.00807EPSS
SaveExploits0References3
AlmaLinux
AlmaLinux
•added 2026/01/14 12:00 a.m.•15 views

Moderate: vsftpd security update

The vsftpd packages include a Very Secure File Transfer Protocol FTP daemon, which is used to serve files over a network. Security Fixes: vsftpd: vsftpd: Denial of service via integer overflow in ls command parameter parsing CVE-2025-14242 For more details about the security issues, including the...

6.5CVSS6.8AI score0.00807EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
•added 2026/01/14 12:00 a.m.•12 views

Moderate: vsftpd security update

The vsftpd packages include a Very Secure File Transfer Protocol FTP daemon, which is used to serve files over a network. Security Fixes: vsftpd: vsftpd: Denial of service via integer overflow in ls command parameter parsing CVE-2025-14242 For more details about the security issues, including the...

6.5CVSS6.8AI score0.00807EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/01/14 12:00 a.m.•2 views

PT-2026-28899

Уязвимость FTP-сервера vsftpd связана с целочисленным переполнением. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

6.8CVSS6.7AI score0.00807EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2026/01/14 12:00 a.m.•17 views

vsftpd 安全漏洞

vsftpd is an FTP server from the personal developer Chris Evans. A security vulnerability exists in vsftpd that stems from an integer overflow when parsing the ls command parameter, which could lead to a denial-of-service attack triggered by a remote authenticated attacker sending a specially...

6.5CVSS6.8AI score0.00807EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•12 views

RHEL 8 : vsftpd (RHSA-2026:0608)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:0608 advisory. The vsftpd packages include a Very Secure File Transfer Protocol FTP daemon, which is used to serve files over a network. Security Fixes: vsftpd:...

6.5CVSS6.8AI score0.00807EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•14 views

MiracleLinux 4 : vsftpd-2.2.2-6.AXS4.1 (AXSA:2011-88:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2011-88:01 advisory. vsftpd is a Very Secure FTP daemon. It was written completely from scratch. Security issues fixed with this release: CVE-2011-0762 The vsffilenamepassesfilter...

7.8CVSS6.7AI score0.73946EPSS
SaveExploits18References2
osv_alsa
osv_alsa
•added 2026/01/14 12:00 a.m.•15 views

ALSA-2026:0606 Moderate: vsftpd security update

The vsftpd packages include a Very Secure File Transfer Protocol FTP daemon, which is used to serve files over a network. Security Fixes: vsftpd: vsftpd: Denial of service via integer overflow in ls command parameter parsing CVE-2025-14242 For more details about the security issues, including the...

6.5CVSS6.8AI score0.00807EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•13 views

MiracleLinux 3 : vsftpd-2.0.5-16.1.1.2.AXS3 (AXSA:2011-94:01)

The remote MiracleLinux 3 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2011-94:01 advisory. vsftpd is a Very Secure FTP daemon. It was written completely from scratch. Security issues fixed with this release: CVE-2011-0762 The vsffilenamepassesfilter...

7.8CVSS6.7AI score0.73946EPSS
SaveExploits18References2
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•12 views

RHEL 9 : vsftpd (RHSA-2026:0605)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:0605 advisory. The vsftpd packages include a Very Secure File Transfer Protocol FTP daemon, which is used to serve files over a network. Security Fixes: vsftpd:...

6.5CVSS6.8AI score0.00807EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•9 views

RHEL 10 : vsftpd (RHSA-2026:0606)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:0606 advisory. The vsftpd packages include a Very Secure File Transfer Protocol FTP daemon, which is used to serve files over a network. Security Fixes: vsftpd:...

6.5CVSS6.8AI score0.00807EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/14 12:00 a.m.•5 views

CVE-2025-14242: Integer Overflow or Wraparound

A flaw was found in vsftpd. This vulnerability allows a denial of service DoS via an integer overflow in the ls command parameter parsing, triggered by a remote, authenticated attacker sending a crafted STAT command with a specific byte sequence...

6.5CVSS6.6AI score0.00807EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/07 9:54 a.m.•20 views

CVE-2025-60262

An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, there is a misconfiguration vulnerability about vsftpd. Through this vulnerability, all files uploaded anonymously via the FTP protocol is automatically owned by the root user and remote...

9.8CVSS7.1AI score0.00571EPSS
SaveExploits1References1
CVE
CVE
•added 2026/01/06 12:00 a.m.•62 views

CVE-2025-60262

The H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point are susceptible to a misconfiguration vulnerability in the vsftpd component. Due to this flaw, any file uploaded anonymously via the FTP protocol is automatically assigned root ownership . A remote a...

9.8CVSS6AI score0.00571EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/06 12:00 a.m.•9 views

CVE-2025-60262: Incorrect Default Permissions

An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, there is a misconfiguration vulnerability about vsftpd. Through this vulnerability, all files uploaded anonymously via the FTP protocol is automatically owned by the root user and remote...

9.8CVSS6AI score0.00571EPSS
SaveExploits1References1
Rows per page
Query Builder