Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority MEDIUM 49

NetSarang Xmanager Enterprise 5.0 Build 1232, Xmanager 5.0 Build 1045, Xshell 5.0 Build 1322, Xftp 5.0 Build 1218, and Xlpd 5.0 Build 1220 contain a malicious nssock2.dll that implements a multi-stage, DNS-based backdoor…

CVSS 4.0CRITICAL 9.3 Network No auth User interaction EPSS 0.00667 Published 2025-10-09 No fix listed CWE-506
Priority HIGH 81

Xftp FTP Client version up to and including 3.0 (build 0238) contain a stack-based buffer overflow vulnerability triggered by a maliciously crafted PWD response from an FTP server.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01465 Published 2025-08-21 No fix listed CWE-121