Lucene search
K

194 matches found

Zero Day Initiative
Zero Day Initiative
added 2025/07/07 12:0 a.m.2 views

Parallels Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Client. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AppServer...

7.3CVSS6.9AI score
Exploits0References2
Zero Day Initiative
Zero Day Initiative
added 2025/06/11 12:0 a.m.6 views

Trend Micro Worry-Free Business Security Uncontrolled Search Path Element Arbitrary Code Execution Vulnerability

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Trend Micro Worry-Free Business Security. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of OpenSSL. The process loads an...

6.8CVSS7.5AI score0.00173EPSS
Exploits0References1
NVD
NVD
added 2025/06/06 7:15 p.m.6 views

CVE-2025-5480

Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Action1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to explo...

7.8CVSS0.00059EPSS
Exploits0References2
OSV
OSV
added 2025/06/06 7:15 p.m.1 views

CVE-2025-5480

Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Action1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to explo...

7.8CVSS6.2AI score0.00059EPSS
Exploits0References2
CVE
CVE
added 2025/06/06 6:49 p.m.53 views

CVE-2025-5480

CVE-2025-5480 describes an Uncontrolled Search Path Element Local Privilege Escalation in Action1. The root cause is the product loading an OpenSSL configuration file from an unsecured location, enabling a local attacker who can execute low-privileged code to escalate to SYSTEM and potentially ex...

7.8CVSS7.8AI score0.00059EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2025/06/06 6:49 p.m.10 views

CVE-2025-5480 Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Action1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to explo...

7.8CVSS0.00059EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.1 views

Action1 代码问题漏洞

Action1 is a patch management software from Action1, Inc. Action1 suffers from a code issue vulnerability that stems from an insecure OpenSSL configuration file loading location that could lead to local elevation of privilege...

7.8CVSS7.4AI score0.00059EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/06/03 12:0 a.m.3 views

PT-2025-23685 · Openssl +1 · Openssl +1

Name of the Vulnerable Software and Affected Versions: Action1 affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

7.8CVSS7.8AI score0.00059EPSS
Exploits0References5
Zero Day Initiative
Zero Day Initiative
added 2025/06/03 12:0 a.m.6 views

Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Action1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of OpenSSL...

7.8CVSS7.3AI score0.00059EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:35 a.m.7 views

CVE-2023-28133

Local privilege escalation in Check Point Endpoint Security Client version E87.30 via crafted OpenSSL configuration file...

7.8CVSS7.2AI score0.01468EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:39 p.m.6 views

CVE-2021-3613

OpenVPN Connect 3.2.0 through 3.3.0 allows local users to load arbitrary dynamic loadable libraries via an OpenSSL configuration file if present, which allows the user to run arbitrary code with the same privilege level as the main OpenVPN process OpenVPNConnect.exe...

7.8CVSS7.2AI score0.00137EPSS
Exploits0References1
OSV
OSV
added 2025/05/16 12:16 a.m.4 views

SUSE-SU-2025:1550-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: Security: - CVE-2025-27587: Timing side channel vulnerability in the P-384 implementation when used with ECDSA in the PPC architecture bsc1240366. - Missing null pointer check before accessing handshakefunc in ssllib.c bsc1240607. FIPS: -...

5.3CVSS6.6AI score0.00224EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/04/25 8:49 p.m.3 views

CVE-2025-2769

Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Bdrive NetDrive. An attacker must first obtain the ability to execute low-privileged code on the target system i...

7.8CVSS7.2AI score0.00135EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/04/25 8:45 p.m.5 views

CVE-2025-2768

Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Bdrive NetDrive. An attacker must first obtain the ability to execute low-privileged code on the target system i...

7.8CVSS7.2AI score0.00135EPSS
Exploits0References3
OSV
OSV
added 2025/04/23 5:16 p.m.2 views

CVE-2025-2768

Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Bdrive NetDrive. An attacker must first obtain the ability to execute low-privileged code on the target system i...

7.8CVSS7.4AI score
Exploits0References1
NVD
NVD
added 2025/04/23 5:16 p.m.5 views

CVE-2025-2768

Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Bdrive NetDrive. An attacker must first obtain the ability to execute low-privileged code on the target system i...

7.8CVSS0.00135EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/23 4:51 p.m.8 views

CVE-2025-2769 Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Bdrive NetDrive. An attacker must first obtain the ability to execute low-privileged code on the target system i...

7.8CVSS0.00135EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/23 4:51 p.m.4 views

CVE-2025-2769 Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Bdrive NetDrive. An attacker must first obtain the ability to execute low-privileged code on the target system i...

7.8CVSS7.2AI score0.00135EPSS
Exploits0References1
CVE
CVE
added 2025/04/23 4:51 p.m.44 views

CVE-2025-2768

CVE-2025-2768 affects Bdrive NetDrive. Root cause: OpenSSL configuration is loaded from an unsecured location, creating an uncontrolled search path element that enables local privilege escalation. Exploitation requires the attacker to execute low-privilege code on the target system; successful ex...

7.8CVSS7.2AI score0.00135EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/23 4:51 p.m.3 views

CVE-2025-2768 Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Bdrive NetDrive. An attacker must first obtain the ability to execute low-privileged code on the target system i...

7.8CVSS7.2AI score0.00135EPSS
Exploits0References1
Rows per page
Query Builder