PCMan has 4 CVEs on record between 2014 and 2026. 1 was published in the last 90 days. The median CVSS is 9.1 (critical), with 2 rated critical. The most common weakness class is CWE-119 (3). Most affected products: ftp_server (3), FTP Server (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 9.1
- Publish → KEV
- —
- Last 90 days
- 1 prev 0
Worst active — by depth score
CVE-2013-4730Critical· 10.0Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command.80CVE-2015-7601High· 7.8Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read arbitrary files via a ..// (dot dot double slash) in a RETR command.67CVE-2016-15060High· 8.3A vulnerability was found in PCMan FTP Server up to 2.0.758CVE-2018-18861Critical· 9.8Buffer overflow in PCMan FTP Server 2.0.7 allows for remote code execution via the APPE command.55
PCMan vulnerabilities
CVEs affecting PCMan, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2016-15060High· 8.3PoCA vulnerability was found in PCMan FTP Server up to 2.0.7
A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component PORT Command Handler. The manipulation results in buffer overflow. The attack can be launched remotely. The exploit has been mad…
CVE-2018-18861Critical· 9.8Buffer overflow in PCMan FTP Server 2.0.7 allows for remote code execution via the APPE command.
Buffer overflow in PCMan FTP Server 2.0.7 allows for remote code execution via the APPE command.
CVE-2015-7601High· 7.8PoCDirectory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read arbitrary files via a ..// (dot dot double slash) in a RETR command.
Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read arbitrary files via a ..// (dot dot double slash) in a RETR command.
CVE-2013-4730Critical· 10.0PoCBuffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command.
Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command.