https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-45690.htmlhttps://patchthecve.com/cve/CVE-2023-45690.htmlWed, 17 Jun 2026 06:29:22 +0000MEDIUM 4.9: Default file permissions on South River Technologies' Titan MFT and Titan SFTP servers on Linux allows a user that's authentication to the OS to read sensitive files on the filesystemhttps://patchthecve.com/cve/CVE-2022-44215.htmlhttps://patchthecve.com/cve/CVE-2022-44215.htmlWed, 17 Jun 2026 05:07:56 +0000MEDIUM 6.1: There is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected to any target URL.https://patchthecve.com/cve/CVE-2023-22629.htmlhttps://patchthecve.com/cve/CVE-2023-22629.htmlWed, 17 Jun 2026 05:35:46 +0000HIGH 8.8: An issue was discovered in TitanFTP through 1.94.1205. The move-file function has a path traversal vulnerability in the newPath parameter. An authenticated attacker can upload any file and then move it anywhere on the server's filesystem.https://patchthecve.com/cve/CVE-2019-10009.htmlhttps://patchthecve.com/cve/CVE-2019-10009.htmlWed, 17 Jun 2026 02:10:01 +0000MEDIUM 6.5: A Directory Traversal issue was discovered in the Web GUI in Titan FTP Server 2019 Build 3505. When an authenticated user attempts to preview an uploaded file (through PreviewHandler.ashx) by using a \..\..\ technique, arbitrary files can be loaded in the server response outside the root directory.https://patchthecve.com/cve/CVE-2014-1843.htmlhttps://patchthecve.com/cve/CVE-2014-1843.htmlWed, 17 Jun 2026 00:05:38 +0000MEDIUM 5.0: Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to obtain the property information of an arbitrary home folder via a Properties action with a .. (dot dot) in the src parameter.https://patchthecve.com/cve/CVE-2014-1842.htmlhttps://patchthecve.com/cve/CVE-2014-1842.htmlWed, 17 Jun 2026 00:05:38 +0000MEDIUM 5.0: Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to list all usernames via a Go action with a .. (dot dot) in the search-bar value.https://patchthecve.com/cve/CVE-2014-1841.htmlhttps://patchthecve.com/cve/CVE-2014-1841.htmlWed, 17 Jun 2026 00:05:38 +0000MEDIUM 5.0: Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attackers to copy an arbitrary user's home folder via a Move action with a .. (dot dot) in the src parameter.https://patchthecve.com/cve/CVE-2010-2426.htmlhttps://patchthecve.com/cve/CVE-2010-2426.htmlTue, 16 Jun 2026 23:20:43 +0000MEDIUM 4.0: Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read arbitrary files, determine file size, via "..//" sequences in the xcrc command.https://patchthecve.com/cve/CVE-2010-2425.htmlhttps://patchthecve.com/cve/CVE-2010-2425.htmlTue, 16 Jun 2026 23:20:43 +0000MEDIUM 6.5: Directory traversal vulnerability in TitanFTPd in South River Technologies Titan FTP Server 8.10.1125, and probably earlier versions, allows remote authenticated users to read or delete arbitrary files via "..//" sequences in a COMB command.https://patchthecve.com/cve/CVE-2008-6082.htmlhttps://patchthecve.com/cve/CVE-2008-6082.htmlTue, 16 Jun 2026 23:01:33 +0000MEDIUM 5.0: Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service (CPU consumption) via the SITE WHO command.https://patchthecve.com/cve/CVE-2008-5281.htmlhttps://patchthecve.com/cve/CVE-2008-5281.htmlTue, 16 Jun 2026 22:59:37 +0000HIGH 10.0: Heap-based buffer overflow in Titan FTP Server 6.05 build 550 allows remote attackers to execute arbitrary code via a long DELE command.https://patchthecve.com/cve/CVE-2008-0702.htmlhttps://patchthecve.com/cve/CVE-2008-0702.htmlTue, 16 Jun 2026 22:50:10 +0000HIGH 9.3: Multiple heap-based buffer overflows in Titan FTP Server 6.03 and 6.0.5.549 allow remote attackers to cause a denial of service (daemon crash or hang) and possibly execute arbitrary code via a long argument to the (1) USER or (2) PASS command, different vectors than CVE-2004-1641.https://patchthecve.com/cve/CVE-2004-1641.htmlhttps://patchthecve.com/cve/CVE-2004-1641.htmlTue, 16 Jun 2026 22:08:06 +0000MEDIUM 5.0: Heap-based buffer overflow in Titan FTP 3.21 and earlier allows remote attackers to cause a denial of service (crash) via a long FTP command such as (1) CWD, (2) STAT, or (3) LIST.https://patchthecve.com/cve/CVE-2004-0437.htmlhttps://patchthecve.com/cve/CVE-2004-0437.htmlTue, 16 Jun 2026 22:05:38 +0000MEDIUM 5.0: Titan FTP Server version 3.01 build 163, and possibly other versions before build 169, allows remote authenticated users to cause a denial of service (crash) by disconnecting from the system during a "LIST -L" command, which causes Titan to access an invalid socket.