NetSarang records
11 published records for vendor netsarang.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 9.1%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-428 Unquoted Search Path or Element4
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-354 Improper Validation of Integrity Check Value1
- CWE-427 Uncontrolled Search Path Element1
The weakness classes this vendor ships most often: where to look.
CWEAll records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
51Plan | CVE-2023-48795Proof of concept | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypasssh · ssh · CWE-354 | Medium5.9 | — | 93.5% | Dec 18, 2023 |
40Plan | CVE-2019-17320No exploit | NetSarang XFTP Client 6.0149 and earlier version contains a buffer overflow vulnerability caused by improper boundary checks when copying finetsarang · xftp · CWE-119 | Critical9.8 | — | 2.2% | Oct 10, 2019 |
31Monitor | CVE-2022-33035No exploit | XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privilegnetsarang · xlpd · CWE-427 | High7.8 | — | 0.4% | Jun 29, 2022 |
30Monitor | CVE-2021-42095No exploit | Xshell before 7.0.0.76 allows attackers to cause a crash by triggering rapid changes to the title bar.netsarang · xshell | High7.5 | — | 1.0% | Oct 7, 2021 |
26Monitor | CVE-2022-27965No exploit | Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.netsarang · xlpd · CWE-428 | Medium6.5 | — | 0.5% | Mar 31, 2022 |
26Monitor | CVE-2022-27966No exploit | Xshell v7.0.0099 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.netsarang · xshell · CWE-428 | Medium6.5 | — | 0.5% | Mar 31, 2022 |
26Monitor | CVE-2022-27964No exploit | Xmanager v7.0.0096 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe filenetsarang · xmanager · CWE-428 | Medium6.5 | — | 0.5% | Mar 31, 2022 |
26Monitor | CVE-2022-27963No exploit | Xftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.netsarang · xftp · CWE-428 | Medium6.5 | — | 0.5% | Mar 31, 2022 |
21Monitor | CVE-2012-1009Proof of concept | NetSarang Xlpd 4 Build 0100 and NetSarang Xmanager Enterprise 4 Build 0186 allow remote attackers to cause a denial of service (daemon crashnetsarang · xlpd | Medium5.0 | — | 2.8% | Feb 14, 2012 |
21Monitor | CVE-2021-37326No exploit | NetSarang Xshell 7 before Build 0077 includes unintended code strings in paste operations.netsarang · xshell · CWE-200 | Medium5.3 | — | 0.8% | Aug 15, 2021 |
20Monitor | CVE-2006-0148No exploit | NetSarang Xlpd 2.1 allows remote attackers to cause a denial of service (crash) via a large number of connections from the same IP address.netsarang · xlpd | Medium5.0 | — | 1.6% | Jan 9, 2006 |
- CVE-2023-4879551Plan
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas
MediumCVSS 5.9Proof of conceptEPSS 94%ssh · sshDec 18, 2023
- CVE-2019-1732040Plan
NetSarang XFTP Client 6.0149 and earlier version contains a buffer overflow vulnerability caused by improper boundary checks when copying fi
CriticalCVSS 9.8No exploitEPSS 2%netsarang · xftpOct 10, 2019
- CVE-2022-3303531Monitor
XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileg
HighCVSS 7.8No exploitEPSS 0%netsarang · xlpdJun 29, 2022
- CVE-2021-4209530Monitor
Xshell before 7.0.0.76 allows attackers to cause a crash by triggering rapid changes to the title bar.
HighCVSS 7.5No exploitEPSS 1%netsarang · xshellOct 7, 2021
- CVE-2022-2796526Monitor
Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
MediumCVSS 6.5No exploitEPSS 0%netsarang · xlpdMar 31, 2022
- CVE-2022-2796626Monitor
Xshell v7.0.0099 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
MediumCVSS 6.5No exploitEPSS 0%netsarang · xshellMar 31, 2022
- CVE-2022-2796426Monitor
Xmanager v7.0.0096 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file
MediumCVSS 6.5No exploitEPSS 0%netsarang · xmanagerMar 31, 2022
- CVE-2022-2796326Monitor
Xftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
MediumCVSS 6.5No exploitEPSS 0%netsarang · xftpMar 31, 2022
- CVE-2012-100921Monitor
NetSarang Xlpd 4 Build 0100 and NetSarang Xmanager Enterprise 4 Build 0186 allow remote attackers to cause a denial of service (daemon crash
MediumCVSS 5.0Proof of conceptEPSS 3%netsarang · xlpdFeb 14, 2012
- CVE-2021-3732621Monitor
NetSarang Xshell 7 before Build 0077 includes unintended code strings in paste operations.
MediumCVSS 5.3No exploitEPSS 1%netsarang · xshellAug 15, 2021
- CVE-2006-014820Monitor
NetSarang Xlpd 2.1 allows remote attackers to cause a denial of service (crash) via a large number of connections from the same IP address.
MediumCVSS 5.0No exploitEPSS 2%netsarang · xlpdJan 9, 2006