proftpd proftpd

Name: proftpd proftpd
Brand: proftpd

productUS

cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical14high12medium1low

updated 2026-10-27

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2015-3306US	high10.0OT critical	99.5% (100th)	KEV	no fix	2015-05-18	= 1.3.5
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	no fix	2023-12-18	≤ 1.3.8b
CVE-2010-4221US	high10.0	91.3% (100th)	Exploit	no fix	2010-11-09	2 versions
CVE-2019-12815US	critical9.8	57.6% (99th)	Exploit	no fix	2019-07-19	≤ 1.3.5b
CVE-2001-0136US	medium5.0	44.9% (99th)	Exploit	no fix	2001-03-12	= 1.2.0
CVE-2004-1602US	medium5.0	30.7% (98th)	Exploit	no fix	2004-10-15	1.2.0 → 1.2.10
CVE-2011-1137US	medium5.0	28.1% (98th)	Exploit	no fix	2011-03-11	16 versions
CVE-2009-0543US	medium6.8	15.8% (97th)	Exploit	no fix	2009-02-12	= 1.3.1
CVE-2010-20103US	critical9.8	13.8% (96th)	Exploit	no fix	2025-08-20	= 1.3.3
CVE-2020-9273US	high8.8	12.1% (96th)	Exploit	no fix	2020-02-20	= 1.3.7
CVE-2026-42167US	—	7.39% (94th)	Exploit	no fix	2026-04-28	≤ 1.3.9b
CVE-2019-18217US	high7.5	20.3% (97th)	—	no fix	2019-10-21	3 versions
CVE-2011-4130US	high9.0	12.6% (96th)	—	no fix	2011-12-06	16 versions
CVE-2010-4652US	medium6.8	11.2% (96th)	—	no fix	2011-02-02	16 versions
CVE-2010-3867US	high7.1	7.56% (94th)	—	no fix	2010-11-09	5 versions
CVE-2016-3125US	high7.5	6.98% (94th)	—	no fix	2016-04-05	2 versions
CVE-2004-0346US	high7.8	5.74% (93rd)	—	1.2.9	2004-11-23	2 versions
CVE-2009-3639US	medium5.8	5.70% (93rd)	—	no fix	2009-10-28	4 versions
CVE-2023-51713US	high7.5	4.25% (91st)	—	1.3.8a	2023-12-22	< 1.3.8a
CVE-2008-7265US	medium4.0	3.20% (88th)	—	no fix	2010-11-09	15 versions
CVE-2013-4359US	medium5.0	2.99% (87th)	—	no fix	2013-09-30	2 versions
CVE-2020-9272US	high7.5	2.11% (82nd)	—	1.3.6c	2020-02-20	< 1.3.6c
CVE-2019-19269US	medium4.9	1.65% (76th)	—	no fix	2019-11-30	2 versions
CVE-2019-19271US	high7.5	1.26% (69th)	—	1.3.6	2019-11-26	< 1.3.6
CVE-2021-46854US	high7.5	1.23% (69th)	—	1.3.7c	2022-11-23	< 1.3.7c
CVE-2019-19270US	high7.5	1.14% (66th)	—	no fix	2019-11-26	2 versions
CVE-2019-19272US	high7.5	0.95% (61st)	—	1.3.6	2019-11-26	< 1.3.6
CVE-2026-63090US	—	0.93% (60th)	—	1.3.9c	2026-07-20	2 versions
CVE-2012-6095US	low1.2	0.69% (53rd)	—	no fix	2013-01-24	17 versions
CVE-2026-63091US	—	0.53% (44th)	—	1.3.9c	2026-07-20	2 versions
CVE-2026-35025US	—	0.51% (43rd)	—	no fix	2026-06-24	2 versions
CVE-2026-53994US	medium6.5	0.45% (39th)	—	1.3.10	2026-07-18	< 1.3.10
CVE-2017-7418US	medium5.5	0.44% (38th)	—	no fix	2017-04-04	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-189CWE-1892 CVEs
CWE-284Improper Access Control2 CVEs
CWE-295Improper Certificate Validation2 CVEs
CWE-310CWE-3102 CVEs
CWE-399CWE-3992 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan