133 matches found
CVE-2025-67790: Improper Null Termination
An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. An unprivileged user could cause occasionally a Blue Screen Of Death BSOD on Windows computers by using an IOCTL and an unterminated string...
CVE-2025-67791: Improper Authentication
An issue was discovered in DriveLock 24.1 through 24.1., 24.2 through 24.2., and 25.1 through 25.1.. An incomplete configuration agent authentication in DriveLock tenant allows attackers to impersonate any DriveLock agent on the network against the DES DriveLock Enterprise Service...
PT-2025-51898
Name of the Vulnerable Software and Affected Versions DriveLock versions 24.1 through 24.1.5 DriveLock versions 24.2 through 24.2.6 DriveLock versions 25.1 through 25.1.4 Description An issue exists where authenticated users can obtain the computer count for other DriveLock tenants through the...
DriveLock 安全漏洞
DriveLock is an endpoint security and data protection platform from DriveLock Germany. A security vulnerability exists in DriveLock versions prior to 24.1.6, prior to 24.2.7, and prior to 25.1.5, which originates from a local, unprivileged user being able to manipulate the DriveLock process in a...
EUVD-2025-203940
An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. Local unprivileged users can manipulate privileged processes to gain more privileges on Windows computers...
PT-2025-51896
Name of the Vulnerable Software and Affected Versions DriveLock Operations Center versions 25.1.2 through 25.1.4 Description A Cross Site Scripting XSS issue exists in DriveLock Operations Center, potentially allowing for session takeover over a network. Recommendations Update to version 25.1.5 o...
PT-2025-51924
Name of the Vulnerable Software and Affected Versions DriveLock versions 24.1 through 24.1. DriveLock versions 24.2 through 24.2. DriveLock versions 25.1 through 25.1. Description An incomplete configuration related to agent authentication in DriveLock tenants can allow attackers to impersonate a...
DriveLock 安全漏洞
DriveLock is an endpoint security and data protection platform from DriveLock Germany. A security vulnerability exists in DriveLock versions prior to 24.1.6, 24.2.7, and 25.1.5, which stems from a local unprivileged user being able to manipulate a privileged process, potentially leading to...
CVE-2025-67794
The DriveLock endpoint security and data protection platform is affected by a vulnerability (CWE-732) where the agent creates directories and files with overly permissive Access Control Lists (ACLs) . This flaw allows local users who do not have administrator privileges to potentially trigger una...
CVE-2025-67789
An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. Authenticated users can retrieve the computer count of other DriveLock tenants via the DriveLock API...
CVE-2025-67781
The DriveLock endpoint security and data protection platform is vulnerable to an improper privilege management issue (CWE-269) affecting Windows computers. Specifically, local unprivileged users can manipulate privileged processes to achieve elevated privileges . This vulnerability impacts DriveL...
CVE-2025-67792
An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. Local unprivileged users can manipulate a DriveLock process to execute arbitrary commands on Windows computers...
CVE-2025-67793
An issue was discovered in DriveLock 24.1 through 24.1., 24.2 through 24.2., and 25.1 before 25.1.6. Users with the "Manage roles and permissions" privilege can promote themselves or other DOC users to the Supervisor role through an API call. This privilege is included by default in the...
CVE-2025-67789: Improper Access Control
An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. Authenticated users can retrieve the computer count of other DriveLock tenants via the DriveLock API...
DriveLock 安全漏洞
DriveLock is an endpoint security and data protection platform from DriveLock Germany. A security vulnerability exists in DriveLock versions prior to 24.1.6, prior to 24.2.7, and prior to 25.1.5, which originates from an unprivileged user who may be able to cause a Windows computer to experience ...
CVE-2025-67787
An issue was discovered in 25.1.2 before 25.1.5. A Cross Site Scripting XSS issue in DriveLock Operations Center allows for session takeover over a network...
EUVD-2007-5189
Malware in sbrugna...
EUVD-2025-31355
Malicious code in bioql PyPI...
