NA
Vendor
nationalsecurityagency
33
CVEs
0
On KEV
8
New 30D
Products
GH8.8
ghidra
nationalsecurityagency
27 CVEs0 on KEV8 new
EM9.1
emissary
NationalSecurityAgency
5 CVEs0 on KEV0 new
SK9.6
skills-service
NationalSecurityAgency
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116012 New | GH ghidra NationalSecurityAgency | 3.6 | Oct 24 | Ghidra before 12.2 Integer Truncation in PackedDecode::skipAttribute Decompiler Parser |
| CVE-2026-115503 New | GH ghidra NationalSecurityAgency | 5.5 | Oct 22 | Ghidra before 12.2 Denial of Service via Compressed Extension Archive |
| CVE-2026-115398 New | GH ghidra NationalSecurityAgency | 5.5 | Oct 22 | Ghidra before 12.2 Denial of Service via TAR and ZIP File System Mount |
| CVE-2026-115397 New | GH ghidra NationalSecurityAgency | 5.5 | Oct 22 | Ghidra before 12.2 Denial of Service via Extension Archive Install |
| CVE-2026-115396 New | GH ghidra NationalSecurityAgency | 5.5 | Oct 22 | Ghidra 10.3 before 12.2 Denial of Service via Compressed Theme Archive |
| CVE-2026-115395 New | GH ghidra NationalSecurityAgency | 5.5 | Oct 22 | Ghidra 10.3 before 12.2 Denial of Service via ThemeReader.readZipTheme() |
| CVE-2026-115394 New | GH ghidra NationalSecurityAgency | 5.5 | Oct 22 | Ghidra through 12.2 Denial of Service via BinaryField Memory Allocation |
| CVE-2026-113604 | GH ghidra NationalSecurityAgency | 5.5 | Oct 20 | Ghidra 10.2 through 12.1.4 Denial of Service via ELF Loader Extended Header Counts |
| CVE-2026-100505 | GH ghidra NationalSecurityAgency | 4.4 | Sep 26 | Ghidra 9.2 through 12.1.4 Heap Out-of-Bounds Read via StringManager |
| CVE-2026-100504 | GH ghidra NationalSecurityAgency | 7.0 | Sep 26 | Ghidra through 12.1.4 Stack-based Buffer Overflow via leftshift128 |
| CVE-2026-100503 | GH ghidra NationalSecurityAgency | 5.5 | Sep 26 | Ghidra through 12.1.4 Heap Use-After-Free in Decompiler |
| CVE-2026-96273 | GH ghidra NationalSecurityAgency | 5.5 | Sep 23 | Ghidra before 12.1.4 Denial of Service via Unreleased Lock in OptionsDB |
| CVE-2026-54694 | SK skills-service NationalSecurityAgency | 9.6 | Sep 9 | NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover |
| CVE-2026-54389 | GH ghidra NationalSecurityAgency | 5.5 | Aug 20 | Ghidra < 12.1.3 PDB Parser Uncontrolled Heap Growth DoS via AbstractPdb |
| CVE-2026-52758 | GH ghidra nationalsecurityagency | 8.8 | Jun 10 | Ghidra < 12.1 - SQL Injection via Unescaped Filter Values in BSim Search |
| CVE-2026-52757 | GH ghidra nationalsecurityagency | 4.4 | Jun 10 | Ghidra < 12.1 - Heap-use-after-free in HighVariable::merge() during decompilation |
| CVE-2026-52756 | GH ghidra nationalsecurityagency | 6.5 | Jun 10 | Ghidra < 12.2 - Unauthenticated Path Traversal in Debugger ISF Server |
| CVE-2026-52755 | GH ghidra nationalsecurityagency | 7.8 | Jun 10 | Ghidra < 12.0.4 - Path Traversal via Zip Slip in Theme Import |
| CVE-2026-52754 | GH ghidra nationalsecurityagency | 8.8 | Jun 10 | Ghidra < 12.1 - Authentication Bypass via Null Signature in PKIAuthenticationModule |
| CVE-2026-52753 | GH ghidra nationalsecurityagency | 5.5 | Jun 10 | Ghidra < 12.0.3 - Out-of-Memory in Rust Symbol Demangler via Malformed Symbol |
| CVE-2026-52752 | GH ghidra nationalsecurityagency | 7.8 | Jun 10 | Ghidra < 12.0.2 - Path Traversal in Extension Installer via ZIP Entry Names |
| CVE-2026-52751 | GH ghidra nationalsecurityagency | 8.8 | Jun 10 | Ghidra < 12.1 - Remote Code Execution via Unfiltered RMI Deserialization in Shared Project Connection |
| CVE-2026-52750 | GH ghidra nationalsecurityagency | 7.8 | Jun 10 | Ghidra < 12.1- Command Injection via URL Annotation Click |
| CVE-2026-49498 | GH ghidra nationalsecurityagency | 8.8 | Jun 10 | Ghidra 11.0 < 12.1 - SQL Injection in PostgreSQL Password Change via Unescaped Username |
| CVE-2026-49497 | GH ghidra nationalsecurityagency | 3.3 | Jun 10 | Ghidra < 12.1 - Path Traversal via .gnu_debuglink in DWARF External Debug File Resolution |
| CVE-2026-49496 | GH ghidra nationalsecurityagency | 6.1 | Jun 10 | Ghidra < 12.1 - Heap-Use-After-Free in SleighBuilder::generatePointerAdd via Vector Reallocation |
| CVE-2026-49495 | GH ghidra nationalsecurityagency | 5.5 | Jun 10 | Ghidra 10.2 < 12.1 - Denial of Service via Circular Reference in Mach-O Export Trie Parser |
| CVE-2024-58350 | GH ghidra nationalsecurityagency | 4.0 | Jun 10 | Ghidra < 11.2 - Use After Free in Sleigh Backend via Static Initialization Order |
| CVE-2026-35582 | EM emissary NationalSecurityAgency | 8.8 | Apr 18 | Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix |
| CVE-2026-35583 | EM emissary NationalSecurityAgency | 5.3 | Apr 7 | Emissary has a Path Traversal via Blacklist Bypass in Configuration API |
| CVE-2026-35581 | EM emissary NationalSecurityAgency | 7.2 | Apr 7 | Emissary has a Command Injection via PLACE_NAME Configuration in Executrix |
| CVE-2026-35580 | EM emissary NationalSecurityAgency | 9.1 | Apr 7 | Emissary has GitHub Actions Shell Injection via Workflow Inputs |
| CVE-2026-35571 | EM emissary NationalSecurityAgency | 4.8 | Apr 7 | Emissary has Stored XSS via Navigation Template Link Injection |