Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
nsa ghidra vulnerabilities and exploits
(subscribe to this query)
7.8
CVSSv3
CVE-2019-17665
NSA Ghidra prior to 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory.
Nsa Ghidra
7.8
CVSSv3
CVE-2019-13623
In NSA Ghidra prior to 9.1, path traversal can occur in RestoreTask.java (from the package ghidra.app.plugin.core.archive) via an archive with an executable file that has an initial ../ in its filename. This allows malicious users to overwrite arbitrary files in scenarios where a...
Nsa Ghidra
1 EDB exploit
9.1
CVSSv3
CVE-2019-13625
NSA Ghidra prior to 9.0.1 allows XXE when a project is opened or restored, or a tool is imported, as demonstrated by a project.prp file.
Nsa Ghidra
9.8
CVSSv3
CVE-2019-16941
NSA Ghidra up to and including 9.0.4, when experimental mode is enabled, allows arbitrary code execution if the Read XML Files feature of Bit Patterns Explorer is used with a modified XML document. This occurs in Features/BytePatterns/src/main/java/ghidra/bitpatterns/info/FileBit...
Nsa Ghidra
1 Github repository
1 Article
9.8
CVSSv3
CVE-2023-22671
Ghidra/RuntimeScripts/Linux/support/launch.sh in NSA Ghidra up to and including 10.2.2 passes user-provided input into eval, leading to command injection when calling analyzeHeadless with untrusted input.
Nsa Ghidra
7.8
CVSSv3
CVE-2019-17664
NSA Ghidra up to and including 9.0.4 uses a potentially untrusted search path. When executing Ghidra from a given path, the Java process working directory is set to this path. Then, when launching the Python interpreter via the "Ghidra Codebrowser > Window > Python&quo...
Nsa Ghidra
9.1
CVSSv3
CVE-2020-6958
An XXE vulnerability in JnlpSupport in Yet Another Java Service Wrapper (YAJSW) 12.14, as used in NSA Ghidra and other products, allows malicious users to exfiltrate data from remote hosts and potentially cause denial-of-service.
Yet Another Java Service Wrapper Project Yet Another Java Service Wrapper 12.14
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race condition
CVE-2024-4249
CVE-2024-4244
CVE-2023-20198
TCP
CVE-2022-48648
CVE-2022-48636
CVE-2024-21345
SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started