Vulnerabilities > Netsarang > Xftp

DATE CVE VULNERABILITY TITLE RISK
2022-03-31 CVE-2022-27963 Unquoted Search Path or Element vulnerability in Netsarang Xftp
Xftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
local
low complexity
netsarang CWE-428
6.5
2019-10-10 CVE-2019-17320 Classic Buffer Overflow vulnerability in Netsarang Xftp
NetSarang XFTP Client 6.0149 and earlier version contains a buffer overflow vulnerability caused by improper boundary checks when copying file name from an attacker controlled FTP server.
network
low complexity
netsarang CWE-120
critical
9.8