Vulnerabilities > NSA > Ghidra > High

DATE CVE VULNERABILITY TITLE RISK
2019-10-16 CVE-2019-17665 Uncontrolled Search Path Element vulnerability in NSA Ghidra 9.0/9.0.1/9.0.2
NSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the current working directory.
local
low complexity
nsa CWE-427
7.8
2019-10-16 CVE-2019-17664 Untrusted Search Path vulnerability in NSA Ghidra
NSA Ghidra through 9.0.4 uses a potentially untrusted search path.
local
low complexity
nsa CWE-426
7.8
2019-07-17 CVE-2019-13623 Path Traversal vulnerability in NSA Ghidra
In NSA Ghidra before 9.1, path traversal can occur in RestoreTask.java (from the package ghidra.app.plugin.core.archive) via an archive with an executable file that has an initial ../ in its filename.
local
low complexity
nsa CWE-22
7.8