Approved changes feed: RSS · Atom
cpe:2.3:a:nationalsecurityagency:ghidra:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Nationalsecurityagency (ace3f93e-75b7-55f6-a56b-519d54d76ebc) |
|---|---|
| Product | Ghidra (c18f76cd-ef98-5139-99f7-a4cb831de23b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-52758 |
vulnerable | 2026-07-29 00:57:48.951301 |
Ghidra < 12.1 - SQL Injection via Unescaped Filter Values in BSim Search
HIGH (8.8)
Ghidra before 12.1 contains a SQL injection vulnerability in BSim filter types that concatenate user-supplied values directly into SQL queries without escaping or parameterization. Remote attackers can inject arbitrary SQL via the BSim network query protocol to read, modify, or delete data in the PostgreSQL database.
Published: 2026-06-10T12:42:30.293Z
Updated: 2026-07-14T21:33:40.245Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-52757 |
vulnerable | 2026-07-29 00:57:48.951129 |
Ghidra < 12.1 - Heap-use-after-free in HighVariable::merge() during decompilation
MEDIUM (4.4)
Ghidra before 12.1 contains a heap-use-after-free vulnerability in the decompiler's HighVariable::merge() function during the variable merging pass. Attackers can trigger this vulnerability by crafting a binary that causes stale pointers in the HighIntersectTest::highedgemap cache to be dereferenced, reading and writing the flags field of freed heap memory when a user opens the binary in Ghidra's decompiler view.
Published: 2026-06-10T12:42:01.080Z
Updated: 2026-07-14T21:33:39.550Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-52756 |
vulnerable | 2026-07-29 00:57:48.950855 |
Ghidra < 12.2 - Unauthenticated Path Traversal in Debugger ISF Server
MEDIUM (4.8)
Ghidra before 12.2 contains an unauthenticated path traversal vulnerability in the IsfServer that accepts TCP connections and passes client-supplied namespace strings directly to filesystem operations without validation. Remote attackers can connect to port 54321 and send crafted protobuf messages with traversal sequences to enumerate filesystem paths and probe arbitrary files.
Published: 2026-06-10T12:41:39.456Z
Updated: 2026-07-14T21:33:38.857Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-52755 |
vulnerable | 2026-07-29 00:57:48.950586 |
Ghidra < 12.0.4 - Path Traversal via Zip Slip in Theme Import
HIGH (7.8)
Ghidra before 12.0.4 contains a path traversal vulnerability in the theme import functionality that allows attackers to write files outside the intended theme directory. Attackers can craft malicious theme ZIP files with traversal sequences in filenames to execute arbitrary code or modify sensitive files like .bashrc or .ssh/authorized_keys.
Published: 2026-06-10T12:41:11.913Z
Updated: 2026-07-14T21:33:38.166Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-52754 |
vulnerable | 2026-07-29 00:57:48.950335 |
Ghidra < 12.1 - Authentication Bypass via Null Signature in PKIAuthenticationModule
HIGH (8.8)
Ghidra before 12.1 contains an authentication bypass vulnerability in PKIAuthenticationModule.authenticate() that allows any user with a valid CA-signed certificate to impersonate other users by presenting their public certificate with a null signature. Attackers can escalate privileges, modify repository access controls, exfiltrate shared reverse engineering databases, and permanently compromise server integrity.
Published: 2026-06-10T12:40:46.463Z
Updated: 2026-07-14T21:33:37.483Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-52753 |
vulnerable | 2026-07-29 00:57:48.950037 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-52752 |
vulnerable | 2026-07-29 00:57:48.949883 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-52751 |
vulnerable | 2026-07-29 00:57:48.949714 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-52750 |
vulnerable | 2026-07-29 00:57:48.949295 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49498 |
vulnerable | 2026-07-29 00:57:45.497657 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49497 |
vulnerable | 2026-07-29 00:57:45.497406 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49496 |
vulnerable | 2026-07-29 00:57:45.497027 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49495 |
vulnerable | 2026-07-29 00:57:45.495848 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-58350 |
vulnerable | 2026-07-28 23:04:19.524770 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.