Type File Transfer Software

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

Vendor »

Identifying all affected vendors is a good starting point for an overview. This makes it possible to determine an homogeneous landscape or the most important hotspots in heterogeneous landscapes.

Product »

Grouping vulnerabilities by products helps to get an overview. This makes it possible to determine an homogeneous landscape or the most important hotspots in heterogeneous landscapes.

Remediation »

Vendors and researchers are eager to find countermeasures to mitigate security vulnerabilities. These can be distinguished between multiple forms and levels of remediation which influence risks differently.

Exploitability »

Researcher and attacker which are looking for security vulnerabilities try to exploit them for academic purposes or personal gain. The level and quality of exploitability can be distinguished to determine simplicity and strength of attacks.

Access Vector »

The approach a vulnerability it becomes important to use the expected access vector. This is typically via the network, local, or physically even.

Authentication »

To exploit a vulnerability a certail level of authentication might be required. Vulnerabilities without such a requirement are much more popular.

User Interaction »

Some attack scenarios require some user interaction by a victim. This is typical for phishing, social engineering and cross site scripting attacks.

C3BM Index »

Our unique C3BM Index (CVSSv3 Base Meta Index) cumulates the CVSSv3 Meta Base Scores of all entries over time. Comparing this index to the amount of disclosed vulnerabilities helps to pinpoint the most important events.

CVSSv3 Base »

The Common Vulnerability Scoring System (CVSS) is an industry standard to define the characteristics and impacts of security vulnerabilities. The base score represents the intrinsic aspects that are constant over time and across user environments. Our unique meta score merges all available scores from different sources to aggregate to the most reliable result.

CVSSv3 Temp »

The Common Vulnerability Scoring System (CVSS) uses temp scores to reflect the characteristics of a vulnerability that may change over time but not across user environments. This includes reporting confidence, exploitability and remediation levels. We do also provide our unique meta score for temp scores, even though other sources rarely publish them.

VulDB »

The moderation team is always defining the base vector and base score for an entry. These and all other available scores are used to generate the meta score.

NVD »

The National Vulnerability Database (NVD) is also defining CVSS vectors and scores. These are usually not complete and might differ from VulDB scores.

Vendor »

Some vendors are willing to publish their own CVSS vectors and scores for vulnerabilities in their products. The coverage varies from vendor to vendor.

Research »

There are sometimes also security researcher which provide their own CVSS vectors and scores for vulnerabilities they have found and published.

Exploit 0-day »

The moderation team is working with the threat intelligence team to determine prices for exploits. Our unique algorithm is used to identify the 0-day prices for an exploit, before it got distributed or became public. Calculated prices are aligned to prices disclosed by vulnerability broker and compared to prices we see on exploit markets.

Exploit Today »

The 0-day prices do not consider time-relevant factors. The today price does reflect price impacts like disclosure of vulnerability details, alternative exploits, availability of countermeasures. These dynamic aspects might decrease the exploit prices over time. Under certain circumstances this happens very fast.

Exploit Market Volume »

Our unique calculation of exploit prices makes it possible to forecast the expected exploit market volume. The calculated prices for all possible 0-day expoits are cumulated for this task. Comparing the volume to the amount of disclosed vulnerabilities helps to pinpoint the most important events.

🔴 CTI Activities »

Our unique Cyber Threat Intelligence aims to determine the ongoing research of actors to anticipiate their acitivities. Observing exploit markets on the Darknet, discussions of vulnerabilities on mailinglists, and exchanges on social media makes it possible to identify planned attacks. Monitored actors and activities are classified whether they are offensive or defensive. They are also weighted as some actors are well-known for certain products and technologies. And some of their disclosures might contain more or less details about technical aspects and personal context. The world map highlights active actors in real-time.

Affected Products (296): 4D WebStar FTP Server, 5e5 Teamtek Universal FTP Server, 121 WAM! FTP Server, A-enterprise GoSamba, A-FTP Anonymous FTP Server, Accellion File Transfer Appliance, Accellion FTP Server, Accellion Secure File Transfer Appliance, acFTP FTP Server, AFTPD, Alex Linde FTP Server, ALTools ALFTP FTP Server, Andrew Tridgell rsync, Apache Cordova File Transfer Plugin, ArgoSoft FTP Server, ArGoSoft FTP Server, Ari Pikivirta Home FTP Server, Ari Pikivirta Home Ftp Server, atftpd, Axway File Transfer Direct, Ayukov NFTPD, Beasts vsftpd, Ben Spink CrushFTP Server, BeroFTPD, bftpd, Biba Software SeleniumServer FTP Server, Biscom Secure File Transfer, BisonFTP Server, Bisonware Bison FTP Server, BisonWare FTP Server, Bisonware FTP Server, Blackmoonftpserver BlackMoon FTP Server, Bolintech Dream FTP Server, BolinTech Dream FTP Server, BootManage TFTPD, bulletproof ftp server, CA Unicenter File Transfer Service, Cat Soft FTP Server, Cat Soft Serv-U, Cat Soft Serv-U FTP Server, Cerberus FTP Server, Cerberus FTP Server Enterprise Edition, Cerberusftp FTP Server, Charles Clark Meteor FTPD, Chesapeake TFTP Server, Cisco TFTP Server, Code Ocean FTP server, Conxint Conxint FTP Server, Cooolsoft Personal FTP Server, Core FTP Server, Core FTP Server, Crob Crob Ftp Server, Crob FTP Server, cwRsync, D-Link TFTP Server, Deerfield Serv-U, Digicraft Yak! FTP Server, Dong Joo Cho File Transfer iFamily, Downstairs.dnsalias Home FTP Server, Dxm2008 XM Easy Personal FTP Server, Dxmsoft XM Easy Personal FTP Server, Dynu FTP Server, Easy File Sharing FTP Server, EFS FTP Server, Elif Keir KnFTPd, EnterpriseDT CompleteFTP Server, Fightersoft Multimedia Star FTP server, File-transfer File Transfer, Filecopa-ftpserver FTP Server, FileZilla Filezilla Server, FileZilla FileZilla Server, FileZilla FileZilla Server Terminal, FileZilla Server, FileZilla Server, file transfer anywhere, fore FTP server, Frank Denis Pure-FTPd, FreeFloat FTP Server, freeFTPd, freeFTPd FTP, ftpd, FTPDMIN, FTP Server, FutureSoft TFTP Server 2000, FutureSoft TFTP Server Multithreaded, Gene6 FTP Server, Gene6 G6 FTP Server, glFTPD, glFtpD, GlFtpd, Glftpd, glFTPd, GlobalSCAPE Secure FTP Server, Globalscape Secure FTP Server, GNU Samba, Goodtech FTP Server, GoodTech FTP Server, GProFTPD, Grant Averett Ceberus FTP Server, Grant Averett Cerberus FTP Server, GSAMBAD, gtkftpd, GuildFTPd, GuildFTPD Server, H. Nomura Tiny FTPd, H. Nomura Tiny FTPdaemon, HD Soft Windows FTP Server, Honeywell FTP Server, hpaftpd, IBM alphaWorks TFTP Server, IBM MQ Managed File Transfer Agent, Inicom Networks ioFTPD, Ipswitch MOVEit File Transfer, Ipswitch Ws Ftp Home, IPswitch WS FTP Server, Ipswitch WS FTP Server, IPSwitch WS FTP Server, Ipswitch WS_FTP Server, Jarle Aase WarFTPd, Jesse Smith bftpd, Jgaa WarFTPd, Jgaa WarFTPD, Jgaa warftpd, Jose Carlos Medeiros maildirsync, KarjaSoft Sami FTP Server, Karjasoft Sami FTP Server, Kiwi TFTP server, Kmint21 Golden FTP Server, Kmint21 Software Golden FTP server, Kmint21 Software Golden FTP Server, Kunani FTP Server, Kunani ODBC FTP Server, Labtam-inc ProFTP, librsync, linux-ftpd, linux-ftpd-ssl, Linux FTP, Luke Mewburn tnftpd, Matrix FTP Server, Matthew Mondor mmftpd, Matthew Mondor mmpop3d, Matu FTP Server, Max-Wilhelm Bruker bftpd, Maxum Development Rumpus FTP Server, Medha WiFi FTP Server App, MeteorSoft FTP Server, Michael Roth Software Personal FTP Server, Microsoft File Transfer Manager, Mollensoft Hyperion FTP Server, Mollensoft Lightweight FTP Server, MRSoft Personal FTP Server, Ncftpd FTP Server, NetMechanica NetDecision TFTP Server, Netscape Professional Services FTP Server, Netwin FTP Server, Nexgen FTP Server, NGC Active FTP Server, Novell Mini FTP Server, oftpd, Olive Tree FTP Server App, Olive Tree Ftp Server App, Open-FTPD, OpenAFS, OpenAFS Client, OpenFTPD FTP Server, Open TFTP Server MT, Open TFTP Server Multithreaded, Open TFTP Server SP, Oracle Managed File Transfer, Orenosv HTTP FTP Server, Orenosv Orenosv Http Ftp Server, OverByte ICS FTP Server, Pablo Baby FTP Server, Pablo FTP Server, Pablo Software Solutions Baby FTP Server, Pablo Software Solutions Quick N Easy FTP Server, PCMan FTP Server, PCMan's FTP Server, PFTP Server, PHPsFTPd, Pi-Soft SpoonFTP Server, PlatinumFTP FTP Server, ProFTPD, ProSysInfo TFTP Server TFTPDWIN, Provider4u Vsftpd Webmin module, PSFTPd, Pure-FTPd, PureFTPd, Pureftpd pure-FTPd, Pureftpd Pure-FTPd, QVT FTP Server, Radovan Garabik Pyftpd, RaidenFTPD, Raiden Professional Servers RaidenFTPD, Rhinosoft Serv-U, Rhinosoft Serv-U FTP Server, Ricoh DL FTP Server, RobotFTP Server, rsync, Rumpus FTP Server, Samba, Samba-TNG, Samba Distcc, Samba pam_ntdom, Samba pam_smb, Samba rsync, Samba Server, Samba server, Samba smbd, Sambar, Sambar Sambar Server, Sambar Server, Sambar Server Pro, Sambar Server, SEGGER embOS FTP Server, Selom Ofori BlackMoon FTP Server, Serv-U, Serv-U FTP Server, Serv-U FTP Server, Serve TFTP Server, Simple Asynchronous File Transfer, Smallftpd, SmallFTPD FTP Server, SmallFTP Server, SmbFTPD, Solarwinds Serv-U, Solarwinds Serv-U File Server, Solarwinds Serv-U FTP Server, Solarwinds Serv-U Managed File Transfer, Solarwinds Serv-U MFT, Solarwinds TFTP Server, SolarWinds TFTP Server, Sorin Chitu Telnet-FTP Server, South River FTP Server, South River Technologies Titan FTP Server, Ssamba, Steve Poulsen GuildFTPd, Steve Poulsen Guild FTPD, Stoney ftpd, Sun FTP Server, TallSoft Quick TFTP Server Pro, Team Johnlong RaidenFTPD, Term FTP Server, Texas Imperial WFTPD Pro Server, Texas Imperial Software WFTPD, Texas Imperial Software wftpd, Texas Imperial Software WFTPD Pro Explorer, Texas Imperial Software WFTPD Pro Server, Tftp-server Winagents Tftp Server, tftp32 TFTP Server, TFTP Server, TFTP Server MT, TFTP Server Single Port, TFTP Server SP, Thomas Krebs NiteServer FTPd, TIBCO Managed File Transfer, TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Internet Server, Tinyftpd, Titan FTP Server, Transsoft Broker FTP Server, TransSoft Broker FTP Server, Trolltech Trollftpd, TYPSoft FTP Server, Typsoft FTP Server, Typsoft Typsoft FTP Server, Typsoft Typsoft Ftp Server, uftpd, University of Washington wu-ftpd, Vermillion ftpd, vsftpd, WarFTPD, wftpd, WFTPD, Wftpserver WinFTP FTP Server, Whitsoft SlimFTPd, Whitsoft Development SlimFTPd, WinAgents TFTP Server, WinFTP Server, WinFTP Wing FTP Server, WinFtp Server, winftp Server, Wing FTP Server, WS_FTP Server, wu-ftpd, Wu-FTPD, wzdftpd, WzdFTPD, Xlight FTP Server, Xlightftpd Xlight FTP Server, XLight FTP Server, XM Easy Personal FTP Server, Xynph FTP Server, yast2-samba-provision, YepYep mtftpd, YoungZSoft CC File Transfer

PublishedBaseTempVulnerabilityProdExpRemCTICVE
12/02/20203.53.5Samba DNS Server denial of serviceSambaNot DefinedNot Defined2.33-CVE-2020-14383
10/30/20204.44.2Samba Winbind service null pointer dereferenceSambaNot DefinedOfficial Fix0.07CVE-2020-14323
10/29/20206.66.6Open TFTP Server Multithreaded OpenTFTPServerMT.exe access controlOpen TFTP Server Multithreaded/TFTP Server Single PortNot DefinedNot Defined0.00CVE-2020-26130
10/23/20205.04.8Biscom Secure File Transfer insufficiently protected credentialsSecure File TransferNot DefinedOfficial Fix0.07CVE-2020-27646
10/20/20207.06.7Oracle Managed File Transfer MFT Runtime Server deserializationManaged File TransferNot DefinedOfficial Fix0.00CVE-2020-9484
09/10/20206.46.4atftpd Daemon assert assertionatftpdNot DefinedNot Defined0.08CVE-2020-6097
07/07/20206.46.1Solarwinds Serv-U File Server HTTP Response information disclosureServ-U File ServerNot DefinedOfficial Fix0.06CVE-2020-15576
07/07/20205.24.9Solarwinds Serv-U File Server cross site scriptingServ-U File ServerNot DefinedOfficial Fix0.00CVE-2020-15575
07/07/20206.46.1Solarwinds Serv-U File Server Cookie missing encryptionServ-U File ServerNot DefinedOfficial Fix0.00CVE-2020-15574
07/07/20205.24.9Solarwinds Serv-U File Server cross site scriptingServ-U File ServerNot DefinedOfficial Fix0.06CVE-2020-15573
07/07/20206.46.1Samba NetBIOS over TCPIP resource consumptionSambaNot DefinedOfficial Fix0.06CVE-2020-10745
07/07/20206.46.1Samba AD LDAP Server use after freeSambaNot DefinedOfficial Fix0.00CVE-2020-10730
07/06/20206.46.1Samba AD DC NBT Server input validationSambaNot DefinedOfficial Fix0.00CVE-2020-14303
07/06/20206.46.1Samba LDAP Server use after freeSambaNot DefinedOfficial Fix0.03CVE-2020-10760
07/05/20209.89.4Solarwinds Serv-U FTP Server Argument Path input validationServ-U FTP ServerNot DefinedOfficial Fix0.04CVE-2020-15543
07/05/20209.89.4Solarwinds Serv-U FTP Server CHMOD Command Remote Code ExecutionServ-U FTP ServerNot DefinedOfficial Fix0.00CVE-2020-15542
07/05/20208.58.2Solarwinds Serv-U FTP Server code injectionServ-U FTP ServerNot DefinedOfficial Fix0.00CVE-2020-15541
06/30/20206.56.5TIBCO Managed File Transfer Command Center MFT Admin Service information disclosureManaged File Transfer Command Center/Managed File Transfer Internet ServerNot DefinedNot Defined0.09CVE-2020-9414
06/30/20205.95.9TIBCO Managed File Transfer Command Center MFT Browser privileges managementManaged File Transfer Command Center/Managed File Transfer Internet ServerNot DefinedNot Defined0.09CVE-2020-9413
06/15/20206.46.1uftpd ftpcmd.c handle_CWD null pointer dereferenceuftpdNot DefinedOfficial Fix0.00CVE-2020-14149
06/09/20209.19.1TIBCO Managed File Transfer command injectionManaged File TransferNot DefinedNot Defined0.06CVE-2020-9412
06/09/20209.19.1TIBCO Managed File Transfer privileges managementManaged File TransferNot DefinedNot Defined0.07CVE-2020-9411
05/06/20206.46.1Samba Active Directory Domain Controller resource consumptionSambaNot DefinedOfficial Fix0.06CVE-2020-10704
05/04/20204.24.0Samba AD DC LDAP Server use after freeSambaNot DefinedOfficial Fix0.07CVE-2020-10700
04/29/20208.58.5Accellion File Transfer Appliance command injectionFile Transfer ApplianceNot DefinedNot Defined0.00CVE-2019-5623

Do you need the next level of professionalism?

Upgrade your account now!