← Back

Flashfxp

flashfxp

4 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Flashfxp
flashfxp

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Flashfxp
1Flashfxp
Apr 29, 2026
Sep 19, 2012
N/A· v4
N/A· v3
9.0 HIGH· v2
Multiple buffer overflows in FlashFXP.exe in FlashFXP 4.2 allow remote authenticated users to execute arbitrary code via a long unicode string to (1) TListbox or (2) TComboBox.
1Flashfxp
1Flashfxp
Apr 23, 2026
Feb 7, 2007
N/A· v4
N/A· v3
7.8 HIGH· v2
FlashFXP 3.4.0 build 1145 allows remote servers to cause a denial of service (CPU consumption) via a response to a PWD command that contains a long string with deeply nested directory structure, possibly due to a buffer...Show more
FlashFXP 3.4.0 build 1145 allows remote servers to cause a denial of service (CPU consumption) via a response to a PWD command that contains a long string with deeply nested directory structure, possibly due to a buffer overflow.Show less
1Flashfxp
1Flashfxp
Apr 16, 2026
Dec 31, 2003
N/A· v4
N/A· v3
6.4 MEDIUM· v2
FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and gain access.
1Flashfxp
1Flashfxp
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
2.1 LOW· v2
FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties.