CVE-2024-10068
- EPSS 0.2%
- Veröffentlicht 17.10.2024 11:15:10
- Zuletzt bearbeitet 15.04.2026 00:35:42
A vulnerability was found in OpenSight Software FlashFXP 5.4.0.3970. It has been classified as critical. Affected is an unknown function in the library libcrypto-1_1.dll of the file FlashFXP.exe. The manipulation leads to uncontrolled search path. An...
- EPSS 17.69%
- Veröffentlicht 19.09.2012 19:55:07
- Zuletzt bearbeitet 16.06.2026 23:46:02
Multiple buffer overflows in FlashFXP.exe in FlashFXP 4.2 allow remote authenticated users to execute arbitrary code via a long unicode string to (1) TListbox or (2) TComboBox.
CVE-2007-0825
- EPSS 3.1%
- Veröffentlicht 07.02.2007 22:28:00
- Zuletzt bearbeitet 16.06.2026 22:36:21
FlashFXP 3.4.0 build 1145 allows remote servers to cause a denial of service (CPU consumption) via a response to a PWD command that contains a long string with deeply nested directory structure, possibly due to a buffer overflow.
CVE-2003-1483
- EPSS 0.69%
- Veröffentlicht 31.12.2003 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:04:31
FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and gain access.
CVE-2002-1939
- EPSS 0.35%
- Veröffentlicht 31.12.2002 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:00:20
FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties.