Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1325 CNY

100%

NationalSecurityAgency — Vulnerabilities & Security Advisories 24

Browse all 24 CVE security advisories affecting NationalSecurityAgency. AI-powered Chinese analysis, POCs, and references for each vulnerability.

The NationalSecurityAgency is primarily responsible for signals intelligence and information assurance for the United States. Historically, common vulnerability classes in its systems include remote code execution, cross-site scripting, and privilege escalation, often stemming from complex software architectures. The agency maintains robust security protocols but has faced notable incidents, including the 2013 breach by Edward Snowden and alleged vulnerabilities in its own encryption tools. With 10 CVEs on record, these typically involve legacy systems or third-party integrations rather than core intelligence platforms. The agency's dual mandate of collecting foreign intelligence and securing national communications creates unique security challenges, balancing offensive capabilities with defensive imperatives.

Found 14 results / 24Clear Filters
Top products by NationalSecurityAgency: ghidra emissary skills-service
CVE IDTitleCVSSSeverityPublished
CVE-2026-52758 Ghidra < 12.1 - SQL Injection via Unescaped Filter Values in BSim Search — ghidraCWE-89 8.8 High2026-06-10
CVE-2026-52757 Ghidra < 12.1 - Heap-use-after-free in HighVariable::merge() during decompilation — ghidraCWE-416 4.4 Medium2026-06-10
CVE-2026-52756 Ghidra < 12.2 - Unauthenticated Path Traversal in Debugger ISF Server — ghidraCWE-22 4.8 Medium2026-06-10
CVE-2026-52755 Ghidra < 12.0.4 - Path Traversal via Zip Slip in Theme Import — ghidraCWE-22 7.8 High2026-06-10
CVE-2026-52754 Ghidra < 12.1 - Authentication Bypass via Null Signature in PKIAuthenticationModule — ghidraCWE-347 8.8 High2026-06-10
CVE-2026-52753 Ghidra < 12.0.3 - Out-of-Memory in Rust Symbol Demangler via Malformed Symbol — ghidraCWE-789 5.5 Medium2026-06-10
CVE-2026-52752 Ghidra < 12.0.2 - Path Traversal in Extension Installer via ZIP Entry Names — ghidraCWE-22 7.8 High2026-06-10
CVE-2026-52751 Ghidra < 12.1 - Remote Code Execution via Unfiltered RMI Deserialization in Shared Project Connection — ghidraCWE-502 8.8 High2026-06-10
CVE-2026-52750 Ghidra < 12.1- Command Injection via URL Annotation Click — ghidraCWE-88 7.8 High2026-06-10
CVE-2026-49498 Ghidra 11.0 < 12.1 - SQL Injection in PostgreSQL Password Change via Unescaped Username — ghidraCWE-89 8.8 High2026-06-10
CVE-2026-49497 Ghidra < 12.1 - Path Traversal via .gnu_debuglink in DWARF External Debug File Resolution — ghidraCWE-22 3.3 Low2026-06-10
CVE-2026-49496 Ghidra < 12.1 - Heap-Use-After-Free in SleighBuilder::generatePointerAdd via Vector Reallocation — ghidraCWE-416 6.1 Medium2026-06-10
CVE-2026-49495 Ghidra 10.2 < 12.1 - Denial of Service via Circular Reference in Mach-O Export Trie Parser — ghidraCWE-835 5.5 Medium2026-06-10
CVE-2024-58350 Ghidra < 11.2 - Use After Free in Sleigh Backend via Static Initialization Order — ghidraCWE-758 2.9 Low2026-06-10

This page lists every published CVE security advisory associated with NationalSecurityAgency. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.