1314 matches found
CVE-2025-61871
NAS Navigator2 Windows version by BUFFALO INC. registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...
BUFFALO NAS Navigator2 registers a Windows service with an unquoted file path
Overview NAS Navigator2 provided by BUFFALO INC. contains the following vulnerability. Unquoted search path or element CWE-428 - CVE-2025-61871 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...
CVE-2025-61871
NAS Navigator2 for Windows (BUFFALO INC.) is affected by an unquoted service path issue (CWE-428) that allows a user with write access to the system drive root to execute arbitrary code with SYSTEM privileges. The root cause is an unquoted file path used when registering a Windows service. Docume...
CVE-2025-61871: Unquoted Search Path or Element
NAS Navigator2 Windows version by BUFFALO INC. registers a Windows service with an unquoted file path. A user with the write permission on the root directory of the system drive may execute arbitrary code with SYSTEM privilege...
EUVD-2019-2604
Malware in sbrugna...
EUVD-2020-5800
Malware in sbrugna...
EUVD-2018-16974
Malware in sbrugna...
EUVD-2021-12295
Malware in sbrugna...
EUVD-2011-1599
Malware in sbrugna...
EUVD-2020-29138
Malware in sbrugna...
EUVD-2018-2717
Malware in sbrugna...
EUVD-2017-10730
Malware in sbrugna...
EUVD-2018-2248
Malware in sbrugna...
EUVD-2020-5801
Malware in sbrugna...
EUVD-2020-13825
Malware in sbrugna...
EUVD-2019-14827
Malware in sbrugna...
EUVD-2021-12308
Malware in sbrugna...
EUVD-2019-15894
Malware in sbrugna...