Lucene search
K

255 matches found

Cvelist
Cvelist
added 6 days ago26 views

CVE-2016-20086 Vembu StoreGrid 4.0 Unquoted Service Path Privilege Escalation

Vembu StoreGrid 4.0 contains an unquoted service path vulnerability in the RemoteBackup and RemoteBackupwebServer services that allows local attackers to escalate privileges. Attackers can place a malicious executable in the unquoted path and restart the service to execute code with LocalSystem...

8.5CVSS0.00114EPSS
Exploits0References2
EUVD
EUVD
added 2026/06/09 6:30 p.m.8 views

EUVD-2026-35501

Integer overflow or wraparound in Windows HTTP.sys allows an unauthorized attacker to execute code over a network...

9.8CVSS5.7AI score0.21506EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2026/05/26 2:55 p.m.20 views

Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.20.4 security update

Important: Red Hat OpenShift GitOps v1.20.4 security update An update is now available for Red Hat OpenShift GitOps. Bug Fixes and Enhancements: GITOPS-8784 Service-CA annotation removed from argocd-server Service during v1.12.3 - v1.12.4 upgrade path, persists in later versions GITOPS-9549...

9.6CVSS5.8AI score0.00379EPSS
Exploits2References5
CISA KEV Catalog
CISA KEV Catalog
added 2026/05/20 12:0 a.m.12 views

Microsoft Windows Buffer Overflow Vulnerability

Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote attackers to execute arbitrary code via a crafted RPC request that triggers an overflow during path canonicalization...

10CVSS8AI score0.98751EPSS
In wildExploits12
Vulnrichment
Vulnrichment
added 2026/04/13 9:0 p.m.2 views

CVE-2026-6220 HummerRisk Video File Download URL ServerService.java ServerService.addServer server-side request forgery

A vulnerability was identified in HummerRisk up to 1.5.0. This vulnerability affects the function ServerService.addServer of the file ServerService.java of the component Video File Download URL Handler. Such manipulation of the argument streamIp leads to server-side request forgery. It is possibl...

5.8CVSS5.5AI score0.00218EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/01/29 2:28 p.m.5 views

CVE-2020-37017

CodeMeter 6.60 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the CodeMeter Runtime Server service to inject malicious code that would execute with...

8.5CVSS6.2AI score0.00121EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/13 12:0 a.m.9 views

PT-2026-2406

Name of the Vulnerable Software and Affected Versions Emerson PAC Machine Edition version 9.80 Description Emerson PAC Machine Edition 9.80 has an issue with an unquoted service path in the TrapiServer service. This could allow local users to potentially run code with higher privileges. An attack...

8.5CVSS6.5AI score0.00133EPSS
Exploits0References6
OSV
OSV
added 2025/12/22 10:16 p.m.4 views

CVE-2023-53965

SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path by inserting malicious code in the system root path that could execute...

7.8CVSS5.9AI score0.00203EPSS
Exploits2References4
Cvelist
Cvelist
added 2025/12/22 9:35 p.m.24 views

CVE-2023-53965 SOUND4 Server Service 4.1.102 Local Privilege Escalation via Unquoted Service Path

SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path by inserting malicious code in the system root path that could execute...

8.6CVSS0.00203EPSS
Exploits2References4
Vulnrichment
Vulnrichment
added 2025/12/22 9:35 p.m.3 views

CVE-2023-53965 SOUND4 Server Service 4.1.102 Local Privilege Escalation via Unquoted Service Path

SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path by inserting malicious code in the system root path that could execute...

8.6CVSS6.7AI score0.00203EPSS
Exploits2References4
CVE
CVE
added 2025/12/22 9:35 p.m.12 views

CVE-2023-53965

CVE-2023-53965 concerns SOUND4 Server Service 4.1.102 with an unquoted service path. The unquoted binary path could be exploited by a local, non-privileged user to execute code with elevated (LocalSystem) privileges during service startup by placing a malicious binary in the system root. Document...

8.6CVSS6.7AI score0.00203EPSS
Exploits2References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/22 12:0 a.m.5 views

PT-2025-52702

Name of the Vulnerable Software and Affected Versions SOUND4 Server Service version 4.1.102 Description SOUND4 Server Service version 4.1.102 contains an unquoted service path issue that may allow local users with limited privileges to execute code with higher system privileges. An attacker can...

8.6CVSS6.6AI score0.00203EPSS
Exploits2References9
CNNVD
CNNVD
added 2025/12/22 12:0 a.m.4 views

SOUND4 Server Service 代码问题漏洞

SOUND4 Server Service is a backend core driver and communication gateway from the French company SOUND4. A code issue vulnerability exists in SOUND4 Server Service version 4.1.102, which stems from an unquoted service path that could lead to elevation of privilege...

8.6CVSS6.8AI score0.00203EPSS
Exploits2References5
Cvelist
Cvelist
added 2025/11/13 10:1 p.m.8 views

CVE-2025-36236 AIX Path Traversal

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server formerly known as NIM master service nimesis could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request to write arbitrary files on the system...

8.2CVSS0.00428EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/13 12:0 a.m.7 views

PT-2025-46923

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM VIOS versions 3.1 and 4.1 Description The NIM server formerly known as NIM master service nimesis in IBM AIX and IBM VIOS may allow a remote attacker to execute arbitrary commands and traverse directories on th...

10CVSS7.1AI score0.00618EPSS
Exploits0References23
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-24413

Malware in sbrugna...

8.8CVSS8.5AI score0.00714EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2006-0599

Malware in sbrugna...

7.5CVSS6.4AI score0.03563EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2008-2405

Malware in sbrugna...

4.3CVSS6.4AI score0.01223EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2008-3945

Malware in sbrugna...

5CVSS6.2AI score0.01747EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2018-10912

Malware in sbrugna...

7.5CVSS7.6AI score0.02805EPSS
Exploits0References4
Rows per page
Query Builder