Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2614▼ 473 respecto a la semana anterior

Críticas / altas1270▼ 74 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)243▼ 274 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-33263	Modificada	Alta (7.5)	0.86%	—	Wftpd Project Wftpd	25/5/2023	17/6/2026	In WFTPD 3.25, usernames and password hashes are stored in an openly viewable wftpd.ini configuration file within the WFTPD directory. NOTE: this is a product from 2006.
CVE-2007-6473	Modificada	Media (5.8)	3.1%	—	Texas Imperial Software Wftpd PRO Explorer	20/12/2007	16/6/2026	Heap-based buffer overflow in Texas Imperial Software WFTPD Pro Explorer 1.0 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command.
CVE-2007-0311	Modificada	Media (5)	2.8%	—	Texas Imperial Software Wftpd Texas Imperial Software Wftpd PRO Server	18/1/2007	16/6/2026	Texas Imperial Software WFTPD and WFTPD Pro Server 3.25 and earlier allow remote attackers to cause a denial of service (application crash) via a long SITE ADMIN command.
CVE-2004-2367	Modificada	Media (5)	3.1%	—	Wftpd^AI Texas Imperial Software Wftpd PRO^AI	31/12/2004	16/6/2026	The Control Panel applet in WFTPD and WFTPD Pro 3.21 R1 and R2 allows remote authenticated users to cause a denial of service (crash) via a long FTP command.
CVE-2004-0342	Modificada	Media (5.5)	0.45%	—	Wftpd PRO Server Project Wftpd PRO Server	23/11/2004	16/6/2026	WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to cause a denial of service (crash) via a (1) MKD or (2) XMKD command that causes an absolute path of 260 characters to be used, which overwrites a cookie with a null character, possibly due to an off-by-one error.
CVE-2001-0296	Modificada	Alta (10)	5.0%	—	Texas Imperial Software Wftpd PRO	3/5/2001	16/6/2026	Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command.
CVE-2000-0876	Modificada	Media (5)	1.5%	—	Texas Imperial Software Wftpd Texas Imperial Software Wftpd PRO	14/11/2000	16/6/2026	WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, which generates an error message that includes the pathname.
CVE-2000-0875	Modificada	Media (5)	1.7%	—	Texas Imperial Software Wftpd Texas Imperial Software Wftpd PRO	14/11/2000	16/6/2026	WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintable characters.