Lucene search
+L

25507 matches found

CVE
CVE
•added 2026/01/21 5:27 p.m.•34 views

CVE-2021-47867

The CVE-2021-47867 entry applies to WIN-PACK PRO 4.8, affecting the ScheduleService through an unquoted service path vulnerability. The unquoted path “C:\Program Files \WINPAKPRO\ScheduleService Service.exe” can allow a local attacker to inject code that executes with elevated privileges during s...

8.5CVSS6AI score0.00148EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/01/21 5:27 p.m.•8 views

CVE-2021-47866 WIN-PACK PRO 4.8 - 'GuardTourService' Unquoted Service Path

WIN-PACK PRO 4.8 contains an unquoted service path vulnerability in the GuardTourService that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path in C:\Program Files \WINPAKPRO\WP GuardTour Service.exe to inject malicious code th...

8.5CVSS6AI score0.00148EPSS
SaveExploits0References3
NVD
NVD
•added 2026/01/21 4:16 p.m.•22 views

CVE-2026-1290

Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24...

5.3CVSS0.004EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/21 3:25 p.m.•17 views

EUVD-2026-3663

Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24...

5.3CVSS5.4AI score0.004EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/21 3:25 p.m.•104 views

CVE-2026-1290

CVE-2026-1290 affects Jamf Pro 11.20–11.24. The issue is described as Authentication Bypass by Primary Weakness with a CVSS v4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/SC:L/VI:N/SI:N/VA:N/SA:N) and a base score of 5.3 (Medium). The Red Hat, CIRCL, NVD, and CVE List entries reiterate the same affec...

5.3CVSS5.8AI score0.004EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/21 3:25 p.m.•26 views

CVE-2026-1290 [PI141230] Fixed A broken access control issue.

Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24...

5.3CVSS5.8AI score0.004EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/21 3:25 p.m.•48 views

CVE-2026-1290 [PI141230] Fixed A broken access control issue.

Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24...

5.3CVSS0.004EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/21 3:25 p.m.•12 views

CVE-2026-1290

Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24...

5.3CVSS5.4AI score0.004EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2026/01/21 12:00 a.m.•19 views

Honeywell WIN-PACK PRO code issue vulnerability

Honeywell WIN-PACK PRO is a security management platform software developed by the American company Honeywell. Version 4.8 of Honeywell WIN-PACK PRO contains a code vulnerability. This vulnerability stems from the WPCommandFileService having a service path without quotes, which may allow local...

8.5CVSS6AI score0.00148EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/21 12:00 a.m.•26 views

PT-2026-3820

WIN-PACK PRO 4.8 contains an unquoted service path vulnerability in the WPCommandFileService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:Program Files WINPAKPROWPCommandFileService Service.exe to inject malicious code...

8.5CVSS5.7AI score0.00148EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/21 12:00 a.m.•5 views

CVE-2026-1290: Authentication Bypass by Primary Weakness

Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24...

5.3CVSS5.8AI score0.004EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/21 12:00 a.m.•7 views

CVE-2021-47867: Unquoted Search Path or Element

WIN-PACK PRO4.8 contains an unquoted service path vulnerability in the ScheduleService that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path in 'C:\Program Files \WINPAKPRO\ScheduleService Service.exe' to inject malicious code...

8.5CVSS6AI score0.00148EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/21 12:00 a.m.•3 views

CVE-2021-47866: Unquoted Search Path or Element

WIN-PACK PRO 4.8 contains an unquoted service path vulnerability in the GuardTourService that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted path in C:\Program Files \WINPAKPRO\WP GuardTour Service.exe to inject malicious code th...

8.5CVSS6AI score0.00148EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/21 12:00 a.m.•5 views

CVE-2021-47868: Unquoted Search Path or Element

WIN-PACK PRO 4.8 contains an unquoted service path vulnerability in the WPCommandFileService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files \WINPAKPRO\WPCommandFileService Service.exe to inject malicious co...

8.5CVSS6AI score0.00148EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/21 12:00 a.m.•21 views

Honeywell WIN-PACK PRO code issue vulnerability

Honeywell WIN-PACK PRO is a security management platform software developed by the American company Honeywell. Version 4.8 of Honeywell WIN-PACK PRO contains a code vulnerability. This vulnerability stems from the ScheduleService component, which uses service paths without quotes, potentially...

8.5CVSS6AI score0.00148EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/01/21 12:00 a.m.•33 views

Honeywell WIN-PACK PRO code issue vulnerability

Honeywell WIN-PACK PRO is a security management platform software developed by the American company Honeywell. Version 4.8 of Honeywell WIN-PACK PRO contains a code vulnerability. This vulnerability stems from the GuardTourService having service paths that are not enclosed in quotes, which may...

8.5CVSS6AI score0.00148EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/01/21 12:00 a.m.•17 views

PT-2026-3775

Authentication Bypass by Primary Weakness vulnerability in Jamf Jamf Pro allows unspecified impact.This issue affects Jamf Pro: from 11.20 through 11.24...

5.3CVSS5.4AI score0.004EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/21 12:00 a.m.•24 views

Jamf Pro security vulnerabilities

Jamf Pro is a set of Apple device management solutions provided by the American company Jamf. Versions 11.20 to 11.24 of Jamf Pro contain security vulnerabilities. These vulnerabilities stem from critical weaknesses that allow authentication bypass, potentially causing unspecified impacts...

5.3CVSS5.8AI score0.004EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/01/19 1:59 p.m.•273 views

Exploit for CVE-2025-6934

CVE-2025-6934 This repository contains a P...

9.8CVSS5.5AI score0.25558EPSS
SaveExploits12
Patchstack
Patchstack
•added 2026/01/19 7:28 a.m.•23 views

WordPress Feeds for YouTube Pro plugin <= 2.6.0 - Unauthenticated Arbitrary File Read via Path Traversal vulnerability

Unauthenticated Arbitrary File Read via Path Traversal vulnerability discovered by LionTree in WordPress Plugin YouTube Feed Pro versions = 2.6.0...

5.9CVSS5.4AI score0.00447EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder