917 matches found
CVE-2019-3999
Improper neutralization of special elements used in an OS command in Druva inSync Windows Client 6.5.0 allows a local, unauthenticated attacker to execute arbitrary operating system commands with SYSTEM privileges...
CVE-2019-15742
A local privilege-escalation vulnerability exists in the Poly Plantronics Hub before 3.14 for Windows client application. A local attacker can exploit this issue to gain elevated privileges...
Microsoft Windows Virtual Machine 安全漏洞
Microsoft Windows Virtual Machine is a virtualization technology from Microsoft USA. It allows you to run many virtual environments within a Windows environment. A security vulnerability exists in Microsoft Windows Virtual Machine. An attacker exploiting this vulnerability could remotely execute...
Microsoft Windows SMB Client 安全漏洞
Microsoft Windows SMB Client is an application from Microsoft Corporation USA. An SMB client. A security vulnerability exists in Microsoft Windows SMB Client. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and editions are...
CVE-2025-43922
The FileWave Windows client before 16.0.0, in some non-default configurations, allows an unprivileged local user to escalate privileges to SYSTEM...
SonicWall NetExtender Windows client Improper Link Resolution Vulnerability
SonicWALL NetExtender Windows client is a Windows-based SSL VPN Virtual Private Network client application from SonicWALL USA. The SonicWALL NetExtender Windows client suffers from an improper link resolution vulnerability that stems from improper link resolution, which can be exploited by an...
CVE-2025-43922
The FileWave Windows client before 16.0.0, in some non-default configurations, allows an unprivileged local user to escalate privileges to SYSTEM...
CVE-2025-43922
CVE-2025-43922 affects the FileWave Windows client prior to 16.0.0. In non-default configurations, an unprivileged local user can escalate to SYSTEM. The vulnerability is documented across multiple feeds; the basic impact is local privilege escalation with high severity (CVSS 3.1: LOCAL, NONE/CON...
CVE-2025-43922
The FileWave Windows client before 16.0.0, in some non-default configurations, allows an unprivileged local user to escalate privileges to SYSTEM...
CVE-2025-43922
The FileWave Windows client before 16.0.0, in some non-default configurations, allows an unprivileged local user to escalate privileges to SYSTEM...
SonicWall NetExtender Windows client Privilege Mismanagement Vulnerability
SonicWall NetExtender Windows client is a Windows-based SSL VPN Virtual Private Network client application from SonicWALL USA. A privilege mismanagement vulnerability exists in the SonicWall NetExtender Windows client, which can be exploited by an attacker to modify the configuration and elevate...
SonicWall NetExtender Windows client elevation of privilege vulnerability
SonicWall NetExtender Windows client is a Windows-based SSL VPN Virtual Private Network client application from SonicWALL USA. An elevation of privilege vulnerability exists in SonicWall NetExtender Windows client, which can be exploited by an attacker to elevate privileges and arbitrary file...
FileWave Windows client 安全漏洞
FileWave Windows client is an end-to-end management software client from FileWave Switzerland. A security vulnerability exists in FileWave Windows client versions prior to 16.0.0, which stems from certain non-default configurations that could cause a local user to elevate privileges to SYSTEM...
PT-2025-17450 · Filewave · Filewave Windows Client
Name of the Vulnerable Software and Affected Versions: FileWave Windows client versions prior to 16.0.0 Description: The issue allows an unprivileged local user to escalate privileges to SYSTEM in certain non-default configurations. Recommendations: For versions prior to 16.0.0, update to version...
Device Posture Portal page error "CheckAgain" or "Download EPA client" | Status code 307
End users encounter issues at the Device Posture Portal when attempting to log into the Workspace URL. They are prompted to "Check Again" or "Download EPA client," despite already having the client installed on their device. Checking endpoint logs, we see the following error: The Windows client...
SUSE CVE-2013-1087
Cross-site scripting XSS vulnerability in the client in Novell GroupWise through 8.0.3 HP3, and 2012 through SP2, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML via the body of an e-mail message...
CVE-2025-23009
A local privilege escalation vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to trigger an arbitrary file deletion...
CVE-2025-23009
A local privilege escalation vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to trigger an arbitrary file deletion...
CVE-2025-23009
CVE-2025-23009 is a local privilege escalation affecting SonicWall NetExtender Windows client (32/64-bit). The available connected data confirms an attacker can trigger an arbitrary file deletion, but the detailed root cause, affected versions, and concrete fix version are not fully specified in ...