VYPR

Core FTP Lite

by Coreftp

CVEs (2)

  • CVE-2020-37155HigFeb 7, 2026
    risk 0.49cvss 7.5epss 0.00

    Core FTP Lite 1.3 contains a buffer overflow vulnerability in the username input field that allows attackers to crash the application by supplying oversized input. Attackers can generate a 7000-byte payload of repeated 'A' characters to trigger an application crash without…

  • CVE-2014-4643Jun 25, 2014
    risk 0.05cvss epss 0.21

    Multiple heap-based buffer overflows in the client in Core FTP LE 2.2 build 1798 allow remote FTP servers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string in a reply to a (1) USER, (2) PASS, (3) PASV, (4) SYST, (5) PWD, or…