CVE-2024-48208

HighCVSS 8.6/10Last modified Jun 17, 2026

Description

pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the ls.c file.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Oct 24, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-48215.4The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's su_lightboCVE-2024-482134.3RockOA v2.6.5 is vulnerable to Directory Traversal in webmain/system/beifen/beifenAction.php.CVE-2024-482148.4KERUI HD 3MP 1080P Tuya Camera 1.0.4 has a command injection vulnerability in the module that connects to the local network via a QR code. TCVE-2024-482178.8An Insecure Direct Object Reference (IDOR) in the dashboard of SiSMART v7.4.0 allows attackers to execute a horizontal-privilege escalation.CVE-2024-482187.2Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/list.CVE-2024-48226.1Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the username and password parameters in '/index.php'. This vulnerability CVE-2024-482227.2Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/edit.CVE-2024-482237.2Funadmin v5.0.2 has a SQL injection vulnerability in /curd/table/fieldlist.CVE-2024-482244.9Funadmin v5.0.2 has an arbitrary file read vulnerability in /curd/index/editfile.CVE-2024-482256.5Funadmin v5.0.2 has an arbitrary file deletion vulnerability in /curd/index/delfile.CVE-2024-482267.2Funadmin 5.0.2 is vulnerable to SQL Injection in curd/table/savefield.CVE-2024-482274.9Funadmin 5.0.2 has a logical flaw in the Curd one click command deletion function, which can result in a Denial of Service (DOS).
CVE-2024-48208: High severity, CVSS 8.6 | Vulnix