Vulnerabilities > Netsarang > Xlpd

DATE CVE VULNERABILITY TITLE RISK
2022-06-29 CVE-2022-33035 Uncontrolled Search Path Element vulnerability in Netsarang Xlpd 7.0.0094
XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges.
local
low complexity
netsarang CWE-427
7.8
2022-03-31 CVE-2022-27965 Unquoted Search Path or Element vulnerability in Netsarang Xlpd 7.0.0094
Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
local
low complexity
netsarang CWE-428
6.5