Vendors / NetSarang Records 11 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now NetSarang records in CISA KEV No NetSarang vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.93547 · Published 2023-12-18 · Partial fix · 0.40.2, 0.17.0 +2 CWE-354
Priority MEDIUM 46
NetSarang XFTP Client 6.0149 and earlier version contains a buffer overflow vulnerability caused by improper boundary checks when copying file name from an attacker controlled FTP server.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02178 · Published 2019-10-10 · No fix listed CWE-119
Priority LOW 35
Xshell before 7.0.0.76 allows attackers to cause a crash by triggering rapid changes to the title bar.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00961 · Published 2021-10-07 · No fix listed
Priority LOW 34
XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00378 · Published 2022-06-29 · No fix listed CWE-427
Priority LOW 29
Xshell v7.0.0099 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
CVSS 3.1 MEDIUM 6.5· Local · High privileges · User interaction · EPSS 0.00485 · Published 2022-03-31 · No fix listed CWE-428
Priority LOW 29
Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
CVSS 3.1 MEDIUM 6.5· Local · High privileges · User interaction · EPSS 0.00485 · Published 2022-03-31 · No fix listed CWE-428
Priority LOW 29
Xmanager v7.0.0096 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
CVSS 3.1 MEDIUM 6.5· Local · High privileges · User interaction · EPSS 0.00485 · Published 2022-03-31 · No fix listed CWE-428
Priority LOW 29
Xftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
CVSS 3.1 MEDIUM 6.5· Local · High privileges · User interaction · EPSS 0.0045 · Published 2022-03-31 · No fix listed CWE-428
Priority LOW 28
NetSarang Xlpd 4 Build 0100 and NetSarang Xmanager Enterprise 4 Build 0186 allow remote attackers to cause a denial of service (daemon crash) via a malformed LPD request.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02814 · Published 2012-02-14 · No fix listed
Priority LOW 26
NetSarang Xlpd 2.1 allows remote attackers to cause a denial of service (crash) via a large number of connections from the same IP address.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01591 · Published 2006-01-09 · No fix listed
Priority LOW 25
NetSarang Xshell 7 before Build 0077 includes unintended code strings in paste operations.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00793 · Published 2021-08-15 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
1 2 8 0 0
THREATIST.IORead the docs