CVE Tools
Track your stack

Filezilla

7 CVEs tracked since 2005. Since Sep 2005, none of them reached CISA KEV.

Filezilla CVEs per month

Sep 2005 to Apr 2007. Point at a month, or focus the strip and use the arrow keys.
Filezilla CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2005-0910
2005-10null or fewer
2005-1110
2005-12null or fewer
2006-01null or fewer
2006-02null or fewer
2006-03null or fewer
2006-04null or fewer
2006-0520
2006-06null or fewer
2006-07null or fewer
2006-08null or fewer
2006-09null or fewer
2006-10null or fewer
2006-11null or fewer
2006-12null or fewer
2007-0120
2007-02null or fewer
2007-03null or fewer
2007-0410

Products

The products that kept showing up in Filezilla's monthly top three, with their CVEs summed over those months.

  1. Filezilla54 months
  2. Filezilla Server11 month
  3. Filezilla Server Terminal11 month

Latest CVEs

The 11 most recently published vulnerabilities affecting Filezilla.

  1. CVE-2016-15003FileZilla Client Installer uninstall.exe unquoted search path6.3
  2. CVE-2015-10003FileZilla Server PORT confused deputy4.3
  3. CVE-2019-5429Untrusted search path in FileZilla before 3.41.0-rc1 allows an attacker to gain privileges via a malicious 'fzsftp' binary in the user's home directory.7.8
  4. CVE-2007-2318Multiple format string vulnerabilities in FileZilla before 2.2.32 allow remote attackers to execute arbitrary code via format string specifiers in (1) FTP server responses or (2) data sent by an FT...9.3
  5. CVE-2007-0317Format string vulnerability in the LogMessage function in FileZilla before 3.0.0-beta5 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code v...7.5
  6. CVE-2007-0315Multiple buffer overflows in FileZilla before 2.2.30a allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors related to (1) Option...9.3
  7. CVE-2006-6564FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a malformed argument to the STOR command, which results in a NULL pointer dereference. NOTE: CVE ana...4.0
  8. CVE-2006-2403Buffer overflow in FileZilla before 2.2.23 allows remote attackers to execute arbitrary commands via unknown attack vectors.7.5
  9. CVE-2006-2173Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbitrary code via a long (1) PORT or (2) PASS followed by the...6.4
  10. CVE-2005-3589Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal crash) via a long USER ftp command.7.8
  11. CVE-2005-2898NOTE: this issue has been disputed by the vendor. FileZilla 2.2.14b and 2.2.15, and possibly earlier versions, when "Use secure mode" is disabled, uses a weak encryption scheme to store the user's...4.6

The record

Peak rank
#62 in Jan 2007
Busiest month shown
May 2006, 2 CVEs
Months with a KEV entry
0 since Sep 2005
Monthly snapshots
5 since 2005
Filezilla's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store