Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

CRITICAL 9.8 CVE-2021-3331EPSS 8% WinSCP before 5.17.10 allows remote attackers to execute arbitrary programs when the URL handler encounters a crafted URL that loads session settings… Winscp 5.17.10+ Fix from $2,3002021-01-27 CRITICAL 9.8 CVE-2020-28864 Buffer overflow in WinSCP 5.17.8 allows a malicious FTP server to cause a denial of service or possibly have other unspecified impact via a long file… Winscp Mitigation only Fix from $2,3002020-11-23 HIGH 7.5 CVE-2018-20684 In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the server, potentially overwritin… Winscp after 5.13.7 Fix from $1,9502019-01-10 MEDIUM 5.8 CVE-2014-2735 WinSCP before 5.5.3, when FTP with TLS is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or s… Winscp after 5.5.2 Fix from $1,6002014-04-22 HIGH 9.3 CVE-2007-4909 Interpretation conflict in WinSCP before 4.0.4 allows remote attackers to perform arbitrary file transfers with a remote server via file-transfer com… Winscp Patch available Fix from $1,9502007-09-17 HIGH 7.1 CVE-2006-3015EPSS 6% Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or download arbitrary files via encoded spaces and doubl… Winscp No fix yet Fix from $1,9502006-06-14