Netsarang

11 CVEs across 6 Netsarang products. Browse Netsarang vulnerabilities, severities, and proof-of-concept exploits.

Netsarang products with known CVEs

ProductCVEs
Xlpd4
Xshell3
Xftp2
Xmanager1
Xmanager Enterprise1
Xshell 71
Netsarang CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-48795Medium5.92023-12-18The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks…
CVE-2022-33035High7.82022-06-29XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges.
CVE-2022-27966Medium6.52022-03-31Xshell v7.0.0099 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
CVE-2022-27965Medium6.52022-03-31Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
CVE-2022-27964Medium6.52022-03-31Xmanager v7.0.0096 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
CVE-2022-27963Medium6.52022-03-31Xftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
CVE-2021-42095High7.52021-10-07Xshell before 7.0.0.76 allows attackers to cause a crash by triggering rapid changes to the title bar.
CVE-2021-37326Medium5.32021-08-15NetSarang Xshell 7 before Build 0077 includes unintended code strings in paste operations.
CVE-2019-17320Critical9.82019-10-10NetSarang XFTP Client 6.0149 and earlier version contains a buffer overflow vulnerability caused by improper boundary checks when copying file name from an att…
CVE-2012-10092012-02-14NetSarang Xlpd 4 Build 0100 and NetSarang Xmanager Enterprise 4 Build 0186 allow remote attackers to cause a denial of service (daemon crash) via a malformed L…
CVE-2006-01482006-01-09NetSarang Xlpd 2.1 allows remote attackers to cause a denial of service (crash) via a large number of connections from the same IP address.