Lucene search
+L

660 matches found

NVD
NVD
•added 2025/05/07 7:16 p.m.•28 views

CVE-2025-26168

IXON VPN Client before 1.4.4 on Linux and macOS allows Local Privilege Escalation to root because there is code execution from a configuration file that can be controlled by a low-privileged user. There is a race condition in which a temporary configuration file, in a world-writable directory, ca...

8.1CVSS0.00183EPSS
SaveExploits0References2
NVD
NVD
•added 2025/05/07 7:16 p.m.•30 views

CVE-2025-26169

IXON VPN Client before 1.4.4 on Windows allows Local Privilege Escalation to SYSTEM because there is code execution from a configuration file that can be controlled by a low-privileged user. There is a race condition in which a temporary configuration file, in a world-writable directory, can be...

8.1CVSS0.00227EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/05/07 12:00 a.m.•25 views

CVE-2025-26168

IXON VPN Client before 1.4.4 on Linux and macOS allows Local Privilege Escalation to root because there is code execution from a configuration file that can be controlled by a low-privileged user. There is a race condition in which a temporary configuration file, in a world-writable directory, ca...

8.1CVSS0.00183EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/05/07 12:00 a.m.•17 views

PT-2025-20293 · Unknown · Ixon Vpn Client

Name of the Vulnerable Software and Affected Versions: IXON VPN Client versions prior to 1.4.4 Description: The issue allows Local Privilege Escalation to SYSTEM due to code execution from a configuration file that can be controlled by a low-privileged user. A race condition exists where a...

8.1CVSS9.5AI score0.00227EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2025/05/07 12:00 a.m.•12 views

IXON VPN Client 安全漏洞

IXON VPN Client is an industrial equipment remote secure access solution from IXON, a VPN client optimized for the IXON Cloud platform. A security vulnerability exists in IXON VPN Client versions prior to 1.4.4, which stems from a competitive condition that could lead to local elevation of...

8.1CVSS8.5AI score0.00227EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/05/07 12:00 a.m.•21 views

PT-2025-20292 · Unknown · Ixon Vpn Client

Name of the Vulnerable Software and Affected Versions: IXON VPN Client versions prior to 1.4.4 Description: The issue allows Local Privilege Escalation to root due to code execution from a configuration file that can be controlled by a low-privileged user. A race condition exists in which a...

8.1CVSS9.6AI score0.00183EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2025/05/07 12:00 a.m.•11 views

CVE-2025-26169

IXON VPN Client before 1.4.4 on Windows allows Local Privilege Escalation to SYSTEM because there is code execution from a configuration file that can be controlled by a low-privileged user. There is a race condition in which a temporary configuration file, in a world-writable directory, can be...

8.1CVSS8.3AI score0.00227EPSS
SaveExploits0References2
CVE
CVE
•added 2025/05/07 12:00 a.m.•73 views

CVE-2025-26169

CVE-2025-26169 affects IXON VPN Client for Windows prior to 1.4.4. The issue allows Local Privilege Escalation to SYSTEM due to code execution from a configuration file that can be controlled by a low-privileged user, with a race condition that lets a temporary config file in a world-writable dir...

8.1CVSS8.3AI score0.00227EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•8 views

CVE-2025-26169: Incorrect Permission Assignment for Critical Resource

IXON VPN Client before 1.4.4 on Windows allows Local Privilege Escalation to SYSTEM because there is code execution from a configuration file that can be controlled by a low-privileged user. There is a race condition in which a temporary configuration file, in a world-writable directory, can be...

8.1CVSS8.6AI score0.00227EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/07 12:00 a.m.•25 views

CVE-2025-26169

IXON VPN Client before 1.4.4 on Windows allows Local Privilege Escalation to SYSTEM because there is code execution from a configuration file that can be controlled by a low-privileged user. There is a race condition in which a temporary configuration file, in a world-writable directory, can be...

8.1CVSS0.00227EPSS
SaveExploits0References2
CVE
CVE
•added 2025/05/07 12:00 a.m.•82 views

CVE-2025-26168

IXON VPN Client prior to 1.4.4 on Linux and macOS is affected by a Local Privilege Escalation to root. The flaw stems from code execution originating from a configuration file that can be controlled by a low-privileged user, via a race condition where a temporary configuration file in a world-wri...

8.1CVSS8.1AI score0.00183EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•6 views

CVE-2025-26168: Incorrect Permission Assignment for Critical Resource

IXON VPN Client before 1.4.4 on Linux and macOS allows Local Privilege Escalation to root because there is code execution from a configuration file that can be controlled by a low-privileged user. There is a race condition in which a temporary configuration file, in a world-writable directory, ca...

8.1CVSS8.6AI score0.00183EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/17 12:00 a.m.•3 views

PT-2025-37712

Уязвимость VPN-клиента Mullvad связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

6.8CVSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/02/08 6:49 a.m.•16 views

CVE-2024-57426

NetMod VPN Client 5.3.1 is vulnerable to DLL injection, allowing an attacker to execute arbitrary code by placing a malicious DLL in a directory where the application loads dependencies. This vulnerability arises due to the improper validation of dynamically loaded libraries...

7.3CVSS7.7AI score0.0035EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/06 8:15 p.m.•22 views

CVE-2024-57426

NetMod VPN Client 5.3.1 is vulnerable to DLL injection, allowing an attacker to execute arbitrary code by placing a malicious DLL in a directory where the application loads dependencies. This vulnerability arises due to the improper validation of dynamically loaded libraries...

7.3CVSS0.0035EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/02/06 12:00 a.m.•7 views

CVE-2024-57426

NetMod VPN Client 5.3.1 is vulnerable to DLL injection, allowing an attacker to execute arbitrary code by placing a malicious DLL in a directory where the application loads dependencies. This vulnerability arises due to the improper validation of dynamically loaded libraries...

7.4AI score0.0035EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/02/06 12:00 a.m.•23 views

CVE-2024-57426

NetMod VPN Client 5.3.1 is vulnerable to DLL injection, allowing an attacker to execute arbitrary code by placing a malicious DLL in a directory where the application loads dependencies. This vulnerability arises due to the improper validation of dynamically loaded libraries...

0.0035EPSS
SaveExploits0References2
CVE
CVE
•added 2025/02/06 12:00 a.m.•70 views

CVE-2024-57426

NetMod VPN Client version 5.3.1 is vulnerable to DLL injection due to the improper validation of dynamically loaded libraries. An attacker can achieve remote code execution by placing a malicious DLL in a directory where the application loads dependencies. While no patch version is currently docu...

7.3CVSS7.9AI score0.0035EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/06 12:00 a.m.•6 views

CVE-2024-57426: Uncontrolled Search Path Element

NetMod VPN Client 5.3.1 is vulnerable to DLL injection, allowing an attacker to execute arbitrary code by placing a malicious DLL in a directory where the application loads dependencies. This vulnerability arises due to the improper validation of dynamically loaded libraries...

7.3CVSS6.5AI score0.0035EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/05 12:00 a.m.•19 views

F5 BIG-IP APM 数据伪造问题漏洞

F5 BIG-IP APM is a suite of access and security solutions from F5 USA. The product provides unified access to business-critical applications and networks. F5 BIG-IP APM suffers from a data forgery issue vulnerability that stems from a vulnerability that could allow an attacker to bypass endpoint...

3.1CVSS5.5AI score0.0014EPSS
SaveExploits0References2
Rows per page
Query Builder