Vulnerabilities > NSA
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-10-16 | CVE-2019-17664 | Untrusted Search Path vulnerability in NSA Ghidra NSA Ghidra through 9.0.4 uses a potentially untrusted search path. | 7.8 |
| 2019-09-28 | CVE-2019-16941 | XML Injection (aka Blind XPath Injection) vulnerability in NSA Ghidra NSA Ghidra through 9.0.4, when experimental mode is enabled, allows arbitrary code execution if the Read XML Files feature of Bit Patterns Explorer is used with a modified XML document. | 9.8 |
| 2019-07-17 | CVE-2019-13625 | XXE vulnerability in NSA Ghidra 9.0 NSA Ghidra before 9.0.1 allows XXE when a project is opened or restored, or a tool is imported, as demonstrated by a project.prp file. | 9.1 |
| 2019-07-17 | CVE-2019-13623 | Path Traversal vulnerability in NSA Ghidra In NSA Ghidra before 9.1, path traversal can occur in RestoreTask.java (from the package ghidra.app.plugin.core.archive) via an archive with an executable file that has an initial ../ in its filename. | 7.8 |