Lucene search
+L

26052 matches found

Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.12 views

PT-2026-4309

Name of the Vulnerable Software and Affected Versions Azure Data Explorer affected versions not specified Description An issue exists in Azure Data Explorer that allows an unauthorized attacker to disclose sensitive information over a network. The issue involves the exposure of sensitive...

7.4CVSS5.2AI score0.00504EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/01/22 12:0 a.m.9 views

Microsoft Azure Data Explorer information leakage vulnerability

Microsoft Azure Data Explorer is a cloud-native data platform developed by the American company Microsoft. There is an information leakage vulnerability present in Microsoft Azure Data Explorer. Attackers can exploit this vulnerability to leak information through the network...

7.4CVSS5.8AI score0.00504EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/21 6:16 p.m.11 views

CVE-2021-47861

Event Log Explorer 4.9.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific file system locations that will be...

8.5CVSS0.00127EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/01/21 5:27 p.m.26 views

CVE-2021-47861 Event Log Explorer 4.9.3 - 'ElodeaEventCollectorService' Unquoted Service Path

Event Log Explorer 4.9.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific file system locations that will be...

8.5CVSS0.00127EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/21 5:27 p.m.3 views

CVE-2021-47861 Event Log Explorer 4.9.3 - 'ElodeaEventCollectorService' Unquoted Service Path

Event Log Explorer 4.9.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific file system locations that will be...

8.5CVSS5.9AI score0.00127EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/21 5:27 p.m.16 views

CVE-2021-47861

CVE-2021-47861 : Event Log Explorer 4.9.3 is affected by an unquoted service path that enables local users to potentially execute arbitrary code with elevated (LocalSystem) privileges during service startup via mislocated executables. Under the documented exploit path, attackers place a malicious...

8.5CVSS5.9AI score0.00127EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/01/21 5:27 p.m.11 views

EUVD-2026-3635

Event Log Explorer 4.9.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific file system locations that will be...

8.5CVSS5.9AI score0.00127EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/01/21 5:27 p.m.8 views

CVE-2021-47861

Event Log Explorer 4.9.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific file system locations that will be...

8.5CVSS5.9AI score0.00127EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/21 12:0 a.m.17 views

PT-2026-3813

Event Log Explorer 4.9.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific file system locations that will be...

8.5CVSS5.9AI score0.00127EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/01/21 12:0 a.m.11 views

FSPro Labs Event Log Explorer code-related vulnerabilities

FSPro Labs Event Log Explorer is a log analysis tool developed by FSPro Labs. Version 4.9.3 of FSPro Labs Event Log Explorer contains a code vulnerability caused by an unquoted service path. This vulnerability could allow local users to execute arbitrary code and gain system privileges...

8.5CVSS6.2AI score0.00127EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/19 11:30 a.m.11 views

CVE-2026-1066

A vulnerability was detected in kalcaddle kodbox up to 1.61.10. This issue affects some unknown processing of the file /?explorer/index/zip of the component Compression Handler. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may b...

8.8CVSS5.3AI score0.0504EPSS
SaveExploits0References1
CNVD
CNVD
added 2026/01/19 12:0 a.m.18 views

Microsoft Windows File Explorer Information Disclosure Vulnerability

Microsoft Windows File Explorer is a file manager application from Microsoft USA. An information disclosure vulnerability exists in Microsoft Windows File Explorer, which can be exploited by attackers to obtain sensitive information...

5.5CVSS5.6AI score0.00484EPSS
SaveExploits1References1
CNVD
CNVD
added 2026/01/19 12:0 a.m.21 views

Microsoft Windows File Explorer Information Disclosure Vulnerability (CNVD-2026-10674)

Microsoft Windows File Explorer is a file manager application from Microsoft USA. An information disclosure vulnerability exists in Microsoft Windows File Explorer, which can be exploited by attackers to obtain sensitive information...

5.5CVSS5.6AI score0.0068EPSS
SaveExploits0References1
CNVD
CNVD
added 2026/01/19 12:0 a.m.13 views

Microsoft Windows File Explorer Information Disclosure Vulnerability (CNVD-2026-10675)

Microsoft Windows File Explorer is a file manager application from Microsoft USA. An information disclosure vulnerability exists in Microsoft Windows File Explorer, which can be exploited by attackers to obtain sensitive information...

5.5CVSS5.6AI score0.00486EPSS
SaveExploits0References1
CNVD
CNVD
added 2026/01/19 12:0 a.m.15 views

Microsoft Windows File Explorer Information Disclosure Vulnerability (CNVD-2026-10673)

Microsoft Windows File Explorer is a file manager application from Microsoft USA. An information disclosure vulnerability exists in Microsoft Windows File Explorer, which can be exploited by attackers to obtain sensitive information...

5.5CVSS5.6AI score0.0068EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/17 9:2 p.m.12 views

CVE-2026-1066 kalcaddle kodbox Compression zip command injection

A vulnerability was detected in kalcaddle kodbox up to 1.61.10. This issue affects some unknown processing of the file /?explorer/index/zip of the component Compression Handler. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may b...

5.3CVSS6.2AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/01/17 9:2 p.m.5 views

CVE-2026-1066 kalcaddle kodbox Compression zip command injection

A vulnerability was detected in kalcaddle kodbox up to 1.61.10. This issue affects some unknown processing of the file /?explorer/index/zip of the component Compression Handler. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may b...

6.5CVSS5.3AI score0.0504EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/01/17 9:2 p.m.15 views

CVE-2026-1066

A vulnerability was detected in kalcaddle kodbox up to 1.61.10. This issue affects some unknown processing of the file /?explorer/index/zip of the component Compression Handler. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may b...

6.5CVSS5.2AI score0.0504EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/17 12:0 a.m.12 views

PT-2026-3372

A vulnerability was detected in kalcaddle kodbox up to 1.61.10. This issue affects some unknown processing of the file /?explorer/index/zip of the component Compression Handler. The manipulation results in command injection. The attack may be launched remotely. The exploit is now public and may b...

6.5CVSS6.9AI score0.0504EPSS
SaveExploits0References5
OSV
OSV
added 2026/01/16 7:16 p.m.6 views

CVE-2021-47836

Markdown Explorer 0.1.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious code through file uploads and editor inputs. Attackers can upload markdown files with embedded JavaScript payloads to execute remote commands and potentially gain system access...

5.1CVSS5.9AI score0.00311EPSS
SaveExploits0References4
Rows per page
Query Builder