Skip to content
Noroxi

NSA records

40 published records for vendor nsa.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
27.5%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 21
  3. 23
  4. 24
  5. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

40 records
  • CVE-2019-16941
    41Plan

    NSA Ghidra through 9.0.4, when experimental mode is enabled, allows arbitrary code execution if the Read XML Files feature of Bit Patterns E

    CriticalCVSS 9.8Proof of conceptEPSS 5%

    nsa · ghidraSep 28, 2019

  • CVE-2023-22671
    40Plan

    Ghidra/RuntimeScripts/Linux/support/launch.sh in NSA Ghidra through 10.2.2 passes user-provided input into eval, leading to command injectio

    CriticalCVSS 9.8No exploitEPSS 3%

    nsa · ghidraJan 6, 2023

  • CVE-2021-32639
    39Monitor

    Server-Side Request Forgery (SSRF) in emissary:emissary

    CriticalCVSS 9.9No exploitEPSS 1%

    nsa · emissaryJul 2, 2021

  • CVE-2021-32647
    37Monitor

    Post-authentication Remote Code Execution (RCE) in emissary:emissary

    CriticalCVSS 9.1No exploitEPSS 3%

    nsa · emissaryJun 1, 2021

  • CVE-2019-13625
    37Monitor

    NSA Ghidra before 9.0.1 allows XXE when a project is opened or restored, or a tool is imported, as demonstrated by a project.prp file.

    CriticalCVSS 9.1No exploitEPSS 2%

    nsa · ghidraJul 16, 2019

  • CVE-2026-35580
    36Monitor

    Emissary has GitHub Actions Shell Injection via Workflow Inputs

    CriticalCVSS 9.1Proof of conceptEPSS 1%

    nsa · emissaryApr 7, 2026

  • CVE-2021-32094
    35Monitor

    U.S.

    HighCVSS 8.8No exploitEPSS 1%

    nsa · emissaryMay 7, 2021

  • CVE-2026-35582
    35Monitor

    Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix

    HighCVSS 8.8No exploitEPSS 1%

    nsa · emissaryApr 17, 2026

  • CVE-2026-4946
    35Monitor

    NSA Ghidra Auto-Analysis Annotation Command Execution

    HighCVSS 8.8No exploitEPSS 1%

    nsa · ghidraMar 29, 2026

  • CVE-2021-32096
    35Monitor

    The ConsoleAction component of U.S.

    HighCVSS 8.8No exploitEPSS 1%

    nsa · emissaryMay 7, 2021

  • CVE-2026-52751
    34Monitor

    Ghidra < 12.1 - Remote Code Execution via Unfiltered RMI Deserialization in Shared Project Connection

    HighCVSS 8.6No exploitEPSS 1%

    nsa · ghidraJun 10, 2026

  • CVE-2026-52758
    34Monitor

    Ghidra < 12.1 - SQL Injection via Unescaped Filter Values in BSim Search

    HighCVSS 8.7No exploitEPSS 1%

    nsa · ghidraJun 10, 2026

  • CVE-2026-49498
    34Monitor

    Ghidra 11.0 < 12.1 - SQL Injection in PostgreSQL Password Change via Unescaped Username

    HighCVSS 8.7No exploitEPSS 0%

    nsa · ghidraJun 10, 2026

  • CVE-2026-52754
    34Monitor

    Ghidra < 12.1 - Authentication Bypass via Null Signature in PKIAuthenticationModule

    HighCVSS 8.7No exploitEPSS 0%

    nsa · ghidraJun 10, 2026

  • CVE-2026-52750
    33Monitor

    Ghidra < 12.1- Command Injection via URL Annotation Click

    HighCVSS 8.4No exploitEPSS 1%

    nsa · ghidraJun 10, 2026

  • CVE-2026-52755
    33Monitor

    Ghidra < 12.0.4 - Path Traversal via Zip Slip in Theme Import

    HighCVSS 8.4No exploitEPSS 0%

    nsa · ghidraJun 10, 2026

  • CVE-2026-52752
    33Monitor

    Ghidra < 12.0.2 - Path Traversal in Extension Installer via ZIP Entry Names

    HighCVSS 8.4No exploitEPSS 0%

    nsa · ghidraJun 10, 2026

  • CVE-2019-13623
    32Monitor

    In NSA Ghidra before 9.1, path traversal can occur in RestoreTask.java (from the package ghidra.app.plugin.core.archive) via an archive with

    HighCVSS 7.8Proof of conceptEPSS 5%

    nsa · ghidraJul 16, 2019

  • CVE-2021-32095
    32Monitor

    U.S.

    HighCVSS 8.1No exploitEPSS 1%

    nsa · emissaryMay 7, 2021

  • CVE-2019-17665
    31Monitor

    NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory.

    HighCVSS 7.8No exploitEPSS 0%

    nsa · ghidraOct 16, 2019

  • CVE-2019-17664
    31Monitor

    NSA Ghidra through 9.0.4 uses a potentially untrusted search path.

    HighCVSS 7.8No exploitEPSS 0%

    nsa · ghidraOct 16, 2019

  • CVE-2026-100504
    29Monitor

    Ghidra through 12.1.4 Stack-based Buffer Overflow via leftshift128

    HighCVSS 7.3No exploitEPSS 0%

    nsa · ghidraSep 26, 2026

  • CVE-2021-32634
    28Monitor

    Deserialization of Untrusted Data in Emissary

    HighCVSS 7.2No exploitEPSS 1%

    nsa · emissaryMay 21, 2021

  • CVE-2026-35581
    28Monitor

    Emissary has a Command Injection via PLACE_NAME Configuration in Executrix

    HighCVSS 7.2No exploitEPSS 1%

    nsa · emissaryApr 7, 2026

  • CVE-2026-49496
    27Monitor

    Ghidra < 12.1 - Heap-Use-After-Free in SleighBuilder::generatePointerAdd via Vector Reallocation

    MediumCVSS 6.9No exploitEPSS 0%

    nsa · ghidraJun 10, 2026