CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| MEDIUM6.5 |
Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file. |
| 31/03/2022 |
| CVE-2022-27964 | MEDIUM6.5 | Xmanager v7.0.0096 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file. | 31/03/2022 |
| CVE-2022-27963 | MEDIUM6.5 | Xftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file. | 31/03/2022 |
| CVE-2021-42095 | HIGH7.5 | Xshell before 7.0.0.76 allows attackers to cause a crash by triggering rapid changes to the title bar. | 07/10/2021 |
| CVE-2021-37326 | MEDIUM5.3 | NetSarang Xshell 7 before Build 0077 includes unintended code strings in paste operations. | 15/08/2021 |
| CVE-2019-17320 | CRITICAL9.8 | NetSarang XFTP Client 6.0149 and earlier version contains a buffer overflow vulnerability caused by improper boundary checks when copying file name from an attacker controlled FTP server. That leads attacker to execute arbitrary code by sending a crafted filename. | 10/10/2019 |
| CVE-2012-1009 | MEDIUM5.0 | NetSarang Xlpd 4 Build 0100 and NetSarang Xmanager Enterprise 4 Build 0186 allow remote attackers to cause a denial of service (daemon crash) via a malformed LPD request. | 14/02/2012 |
| CVE-2006-0148 | MEDIUM5.0 | NetSarang Xlpd 2.1 allows remote attackers to cause a denial of service (crash) via a large number of connections from the same IP address. | 09/01/2006 |