Lucene search
+L

150 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 5:41 p.m.11 views

CVE-2020-5147

SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privileges in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 10.2.300 and earlier...

5.3CVSS6.8AI score0.01658EPSS
SaveExploits4
RedhatCVE
RedhatCVE
added 2025/05/22 3:37 p.m.16 views

CVE-2020-5131

SonicWall NetExtender Windows client vulnerable to arbitrary file write vulnerability, this allows attacker to overwrite a DLL and execute code with the same privilege in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 9.0.815 and earlier...

7.8CVSS7.4AI score0.00548EPSS
SaveExploits0
CNVD
CNVD
added 2025/04/25 12:00 a.m.30 views

SonicWall NetExtender Windows client Improper Link Resolution Vulnerability

SonicWALL NetExtender Windows client is a Windows-based SSL VPN Virtual Private Network client application from SonicWALL USA. The SonicWALL NetExtender Windows client suffers from an improper link resolution vulnerability that stems from improper link resolution, which can be exploited by an...

7.2CVSS6.8AI score0.00415EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/21 12:00 a.m.12 views

SonicWall NetExtender Windows client Privilege Mismanagement Vulnerability

SonicWall NetExtender Windows client is a Windows-based SSL VPN Virtual Private Network client application from SonicWALL USA. A privilege mismanagement vulnerability exists in the SonicWall NetExtender Windows client, which can be exploited by an attacker to modify the configuration and elevate...

7.2CVSS6.8AI score0.0035EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/21 12:00 a.m.14 views

SonicWall NetExtender Windows client elevation of privilege vulnerability

SonicWall NetExtender Windows client is a Windows-based SSL VPN Virtual Private Network client application from SonicWALL USA. An elevation of privilege vulnerability exists in SonicWall NetExtender Windows client, which can be exploited by an attacker to elevate privileges and arbitrary file...

7.2CVSS6.9AI score0.00371EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/04/18 12:00 a.m.20 views

SonicWall NetExtender < 10.3.2 Multiple Vulnerabilities (SNWLID-2025-0006)

The version of SonicWall NetExtender installed on the remote host is prior to 10.3.2. It is, therefore, affected by multiple vulnerabilities as referenced in the SNWLID-2025-0006 advisory. - An improper privilege management vulnerability in the SonicWall NetExtender Windows 32 and 64 bit client...

7.2CVSS7.3AI score0.00415EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2025/04/15 12:00 a.m.17 views

The software client’s vulnerability for providing remote access with SonicWall NetExtender allows a intruder to gain access to modify data.

The vulnerability of the software client for remote access support provided by SonicWall NetExtender is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to modify data...

7.2CVSS7.1AI score0.0035EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/15 12:00 a.m.20 views

The software client’s vulnerability for providing remote access with SonicWall NetExtender allows a intruder to upload any files they want.

The vulnerability of the software client for remote access support provided by SonicWall NetExtender is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow attackers to upload arbitrary files...

6.5CVSS7.2AI score0.00415EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/15 12:00 a.m.18 views

The software client’s vulnerability for providing remote access with SonicWall NetExtender allows a intruder to delete any files they want.

The vulnerability of the software client for remote access support provided by SonicWall NetExtender is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to delete any files they desire...

5.9CVSS7.1AI score0.00371EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/04/12 7:49 p.m.46 views

CVE-2025-23010

An Improper Link Resolution Before File Access 'Link Following' vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to manipulate file paths...

7.2CVSS6.8AI score0.00415EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/12 7:47 p.m.46 views

CVE-2025-23009

A local privilege escalation vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to trigger an arbitrary file deletion...

7.2CVSS7.1AI score0.00371EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/12 7:45 p.m.56 views

CVE-2025-23008

An improper privilege management vulnerability in the SonicWall NetExtender Windows 32 and 64 bit client allows a low privileged attacker to modify configurations...

7.2CVSS6.8AI score0.0035EPSS
SaveExploits0References3
NVD
NVD
added 2025/04/10 7:16 p.m.45 views

CVE-2025-23008

An improper privilege management vulnerability in the SonicWall NetExtender Windows 32 and 64 bit client allows a low privileged attacker to modify configurations...

7.2CVSS0.0035EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/10 7:16 p.m.46 views

CVE-2025-23010

An Improper Link Resolution Before File Access 'Link Following' vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to manipulate file paths...

7.2CVSS0.00415EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/10 7:16 p.m.32 views

CVE-2025-23009

A local privilege escalation vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to trigger an arbitrary file deletion...

7.2CVSS0.00371EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/10 6:57 p.m.45 views

CVE-2025-23010

An Improper Link Resolution Before File Access 'Link Following' vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to manipulate file paths...

0.00415EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/10 6:57 p.m.67 views

CVE-2025-23010

SonicWall NetExtender Windows client (32/64-bit) is affected by CVE-2025-23010: an Improper Link Resolution Before File Access (Link Following) vulnerability that can allow an attacker to manipulate file paths. Concrete details in connected sources indicate affected versions include 10.3.1 and ea...

7.2CVSS6.5AI score0.00415EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/10 6:57 p.m.13 views

CVE-2025-23010

An Improper Link Resolution Before File Access 'Link Following' vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to manipulate file paths...

6.8AI score0.00415EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/10 6:55 p.m.77 views

CVE-2025-23009

CVE-2025-23009 is a local privilege escalation affecting SonicWall NetExtender Windows client (32/64-bit). The available connected data confirms an attacker can trigger an arbitrary file deletion, but the detailed root cause, affected versions, and concrete fix version are not fully specified in ...

7.2CVSS6AI score0.00371EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/10 6:55 p.m.10 views

CVE-2025-23009

A local privilege escalation vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to trigger an arbitrary file deletion...

5.9AI score0.00371EPSS
SaveExploits0References1
Rows per page
Query Builder