putty putty

Name: putty putty
Brand: putty

productUS

cpe:2.3:a:putty:putty:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

4critical16high9medium4low

updated 2026-10-28

vulnerabilities (36)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	0.80	2023-12-18	< 0.80
CVE-2002-1359US	high10.0	80.2% (100th)	Exploit	no fix	2002-12-23	3 versions
CVE-2017-6542US	critical9.8	21.8% (98th)	Exploit	no fix	2017-03-27	≤ 0.67
CVE-2024-31497US	medium5.9	5.73% (93rd)	Exploit	0.81	2024-04-15	0.68 → 0.81
CVE-2000-0476US	medium5.0	2.53% (85th)	Exploit	no fix	2000-06-01	= 0.48
CVE-2019-9896US	high7.8	0.76% (55th)	Exploit	0.71	2019-03-21	< 0.71
CVE-2002-1357US	high10.0	9.77% (96th)	—	no fix	2002-12-23	3 versions
CVE-2004-1008US	high10.0	7.36% (94th)	—	no fix	2005-01-10	9 versions
CVE-2002-1360US	high10.0	6.14% (93rd)	—	no fix	2002-12-23	3 versions
CVE-2002-1358US	high10.0	5.84% (93rd)	—	no fix	2002-12-23	3 versions
CVE-2004-1440US	high7.5	4.11% (91st)	—	no fix	2004-12-31	8 versions
CVE-2019-9898US	critical9.8OT elevated	3.94% (90th)	—	0.71	2019-03-21	< 0.71
CVE-2005-0467US	high7.5	3.76% (90th)	—	no fix	2005-02-21	≤ 0.56
CVE-2013-4852US	medium6.8	3.45% (89th)	—	no fix	2013-08-19	18 versions
CVE-2020-14002US	medium5.9	3.13% (88th)	—	no fix	2020-06-29	0.68 → 0.73
CVE-2019-9897US	high7.5	2.94% (87th)	—	0.71	2019-03-21	< 0.71
CVE-2019-9895US	critical9.8	2.50% (85th)	—	0.71	2019-03-21	< 0.71
CVE-2013-4206US	medium6.8	2.48% (84th)	—	no fix	2013-08-19	18 versions
CVE-2019-9894US	high7.5	2.45% (84th)	—	0.71	2019-03-21	< 0.71
CVE-2019-17069US	high7.5	2.25% (83rd)	—	0.73	2019-10-01	< 0.73
CVE-2003-0069US	high7.5	2.20% (82nd)	—	no fix	2003-03-18	= 0.53
CVE-2021-33500US	high7.5	1.91% (80th)	—	0.75	2021-05-21	< 0.75
CVE-2013-4207US	medium4.3	1.83% (79th)	—	no fix	2013-08-19	18 versions
CVE-2019-17068US	high7.5	1.81% (78th)	—	0.73	2019-10-01	< 0.73
CVE-2019-17067US	critical9.8	1.63% (76th)	—	0.73	2019-10-01	< 0.73
CVE-2021-36367US	high8.1OT elevated	1.11% (66th)	—	no fix	2021-07-09	≤ 0.75
CVE-2016-6167US	high7.8	0.75% (55th)	—	no fix	2017-01-30	= 0.67
CVE-2015-2157US	low2.1	0.58% (48th)	—	no fix	2015-03-27	13 versions
CVE-2026-4115US	—OT elevated	0.55% (46th)	—	no fix	2026-03-22	= 0.83
CVE-2011-4607US	low2.1	0.41% (35th)	—	no fix	2013-08-23	3 versions
CVE-2013-4208US	low2.1	0.39% (33rd)	—	no fix	2013-08-19	17 versions
CVE-2003-0048US	medium4.6OT elevated	0.38% (32nd)	—	no fix	2003-02-19	4 versions
CVE-2026-48850US	medium5.9	0.32% (25th)	—	0.84	2026-05-25	0.72 → 0.84
CVE-2006-7162US	low1.9OT elevated	0.31% (24th)	—	no fix	2007-03-07	≤ 0.59
CVE-2026-48852US	—	0.27% (20th)	—	0.84	2026-05-25	0.71 → 0.84
CVE-2026-48851US	—	0.22% (13th)	—	0.84	2026-05-25	0.77 → 0.84

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer8 CVEs
CWE-20Improper Input Validation6 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor5 CVEs
CWE-345Insufficient Verification of Data Authenticity3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-190Integer Overflow or Wraparound2 CVEs
CWE-189CWE-1891 CVEs
CWE-203Observable Discrepancy1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE36 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan