Known vulnerabilities in uftpd 2.4

Vendor: Joachim Nilsson
Software: uftpd
Version: 2.4
Software CPE: cpe:2.3:a:joachim_nilsson:uftpd:*:*:*:*:*:*:*:*
Website: https://troglobit.com/
Total vulnerabilities: 6
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting uftpd version 2.4 uftpd 2.4 is affected by 6 vulnerabilities: 1 high, 4 medium, 1 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137385 - Stack-based buffer overflow
CVE-2026-59964		 CWE-121 Medium
Public exploit available
No
 2.16 13.07.2026 SB2026071322
#VU29489 - NULL Pointer Dereference
CVE-2020-14149		 CWE-476 Low
No
No
 2.12 02.07.2020 SB2020061527
SB2020062522
#VU29444 - Missing release of memory after effective lifetime
 CWE-401 Medium
No
No
 2.13 01.07.2020 SB2020070121
#VU29443 - Improper input validation
 CWE-20 Medium
No
No
 2.13 01.07.2020 SB2020070121
#VU24805 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-5221		 CWE-22 Medium
No
No
 2.11 31.01.2020 SB2020010612
#VU24401 - Memory corruption
CVE-2020-5204		 CWE-119 High
No
No
 2.11 20.01.2020 SB2020010612
SB2020012011