Overview 10 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 1 public PoC · 0 EPSS ≥ 0.5
10matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
1public PoC10.0%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
10
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
10
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
1
10.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
9
90.0%
split by
peak 5 / year
20061
Not applicable1
Medium1
not blocked1
No public exploit1
20070
20080
20090
20100
20110
20121
Not applicable1
Medium1
not blocked1
Working exploit published1
20130
20140
20150
20160
20170
20180
20191
Not applicable1
Critical1
not blocked1
No public exploit1
20200
20212
Not applicable2
High1
Medium1
not blocked2
No public exploit2
20225
Not applicable5
High1
Medium4
not blocked5
No public exploit5
200620082010201220142016201820202022
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2022-33035 | High | 2022-06-29 | Not applicable | No public exploit | XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges. |
| CVE-2022-27966 | Medium | 2022-03-31 | Not applicable | No public exploit | Xshell v7.0.0099 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file. |
| CVE-2022-27965 | Medium | 2022-03-31 | Not applicable | No public exploit | Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file. |
| CVE-2022-27964 | Medium | 2022-03-31 | Not applicable | No public exploit | Xmanager v7.0.0096 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file. |
| CVE-2022-27963 | Medium | 2022-03-31 | Not applicable | No public exploit | Xftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file. |
| CVE-2021-42095 | High | 2021-10-07 | Not applicable | No public exploit | Xshell before 7.0.0.76 allows attackers to cause a crash by triggering rapid changes to the title bar. |
| CVE-2021-37326 | Medium | 2021-08-15 | Not applicable | No public exploit | NetSarang Xshell 7 before Build 0077 includes unintended code strings in paste operations. |
| CVE-2019-17320 | Critical | 2019-10-10 | Not applicable | No public exploit | NetSarang XFTP Client 6.0149 and earlier version contains a buffer overflow vulnerability caused by improper boundary checks when copying file name from an attacker controlled FTP server. That leads attacker to execute arbitrary code by sending a crafted filename. |
| CVE-2012-1009 | Medium | 2012-02-14 | Not applicable | Working exploit published | NetSarang Xlpd 4 Build 0100 and NetSarang Xmanager Enterprise 4 Build 0186 allow remote attackers to cause a denial of service (daemon crash) via a malformed LPD request. |
| CVE-2006-0148 | Medium | 2006-01-09 | Not applicable | No public exploit | NetSarang Xlpd 2.1 allows remote attackers to cause a denial of service (crash) via a large number of connections from the same IP address. |