Lucene search
+L

243 matches found

Positive Technologies
Positive Technologies
added 2022/02/21 12:0 a.m.18 views

PT-2022-16587 · Okta · Okta Advanced Server Access Client

Name of the Vulnerable Software and Affected Versions: Okta Advanced Server Access Client for Windows versions prior to 1.57.0 Description: The issue is related to command injection via a specially crafted URL. Recommendations: For versions prior to 1.57.0, update to version 1.57.0 or later to...

8.8CVSS8.8AI score0.16571EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2022/01/10 2:10 p.m.2 views

CVE-2021-30360

Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted EXE in the repair folder which runs with the Check Point Remote Access Client...

7.8CVSS7AI score0.0057EPSS
SaveExploits1References3
OSV
OSV
added 2022/01/10 2:10 p.m.6 views

CVE-2021-30360

Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted EXE in the repair folder which runs with the Check Point Remote Access Client...

7.8CVSS5.8AI score0.0057EPSS
SaveExploits1References2
NVD
NVD
added 2022/01/10 2:10 p.m.25 views

CVE-2021-30360

Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted EXE in the repair folder which runs with the Check Point Remote Access Client...

7.8CVSS0.0057EPSS
SaveExploits1References2
NVD
NVD
added 2021/12/01 11:15 p.m.16 views

CVE-2021-42711

Barracuda Network Access Client before 5.2.2 creates a Temporary File in a Directory with Insecure Permissions. This file is executed with SYSTEM privileges when an unprivileged user performs a repair operation...

7.8CVSS0.00259EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/01 11:15 p.m.2 views

CVE-2021-42711

Barracuda Network Access Client before 5.2.2 creates a Temporary File in a Directory with Insecure Permissions. This file is executed with SYSTEM privileges when an unprivileged user performs a repair operation...

7.8CVSS7.1AI score0.00259EPSS
SaveExploits0References2
Prion
Prion
added 2021/12/01 11:15 p.m.20 views

Directory traversal

Barracuda Network Access Client before 5.2.2 creates a Temporary File in a Directory with Insecure Permissions. This file is executed with SYSTEM privileges when an unprivileged user performs a repair operation...

7.2CVSS7.6AI score0.00259EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/12/01 10:46 p.m.25 views

CVE-2021-42711

Barracuda Network Access Client before 5.2.2 creates a Temporary File in a Directory with Insecure Permissions. This file is executed with SYSTEM privileges when an unprivileged user performs a repair operation...

7.8AI score0.00259EPSS
SaveExploits0References1
CVE
CVE
added 2021/12/01 10:46 p.m.44 views

CVE-2021-42711

CVE-2021-42711 affects Barracuda Network Access Client before version 5.2.2. It describes the creation of a temporary file in a directory with insecure permissions, and this file is executed with SYSTEM privileges when an unprivileged user performs a repair operation. The vulnerability’s impact i...

7.8CVSS7.5AI score0.00259EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/12/01 12:0 a.m.6 views

Barracuda Network Access Client 授权问题漏洞

Barracuda Networks Barracuda Network Access Client is a suite of Windows-only applications from Barracuda Networks, Inc. It is used to control network and Vpn client access based on rules and policies. An authorization issue vulnerability exists in Barracuda Network Access Client, which arises fr...

7.8CVSS7.5AI score0.00259EPSS
SaveExploits0References2
NVD
NVD
added 2020/08/26 2:15 p.m.19 views

CVE-2019-18847

Enterprise Access Client Auto-Updater allows for Remote Code Execution prior to version 2.0.1...

9.8CVSS9.8AI score0.02275EPSS
SaveExploits0References2
OSV
OSV
added 2020/08/26 2:15 p.m.7 views

CVE-2019-18847

Enterprise Access Client Auto-Updater allows for Remote Code Execution prior to version 2.0.1...

9.8CVSS7.4AI score0.02275EPSS
SaveExploits0References2
Prion
Prion
added 2020/08/26 2:15 p.m.21 views

Remote code execution

Enterprise Access Client Auto-Updater allows for Remote Code Execution prior to version 2.0.1...

7.5CVSS9.6AI score0.02275EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2020/08/26 1:47 p.m.51 views

CVE-2019-18847

CVE-2019-18847 affects Akamai’s Enterprise Application Access Client (EAA) prior to version 2.0.1. The vulnerability stems from unsigned end-user updater downloads and inadequate TLS validation of update sources, enabling remote code execution on the end-user machine with administrator/root privi...

9.8CVSS9.7AI score0.02275EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/08/26 1:47 p.m.24 views

CVE-2019-18847

Enterprise Access Client Auto-Updater allows for Remote Code Execution prior to version 2.0.1...

9.8AI score0.02275EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2020/04/13 4:12 a.m.58 views

MS15-022: Description of the security update for SharePoint Server 2013 and SharePoint Foundation 2013: March 10, 2015

Resolves vulnerabilities in Microsoft Office that could allow remote code execution if an attacker convinces a user to open or preview a specially crafted Microsoft Word file in an affected version of Office.IntroductionThis security update resolves vulnerabilities in Microsoft Office that could...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2013/05/31 12:0 a.m.18 views

Fedora Update for gypsy FEDORA-2013-8705

Check for the Version of gypsy OpenVAS Vulnerability Test Fedora Update for gypsy FEDORA-2013-8705 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

2.1CVSS6.4AI score0.00477EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2012/09/13 12:0 a.m.37 views

Check Point Endpoint Security Remote Access Client Installed

Check Point Endpoint Security Remote Access Client, a software VPN client, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62075; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/01/31";...

5.5AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2012/09/13 12:0 a.m.34 views

Check Point Remote Access Client Insecure Library Loading

The version of Check Point Remote Access Client installed on the remote Windows host is earlier than E75.10 and is, therefore, reportedly affected by an insecure library loading vulnerability. If an attacker can trick a user on the affected system into opening a specially crafted file, they may b...

6.9CVSS5.9AI score0.00399EPSS
SaveExploits0References3
NVD
NVD
added 2010/02/15 6:30 p.m.23 views

CVE-2009-4643

Stack-based buffer overflow in dsInstallerService.dll in the Juniper Installer Service, as used in Juniper Odyssey Access Client 4.72.11421.0 and other products, allows remote attackers to execute arbitrary code via a long string in a malformed DSSETUPSERVICECMDUNINSTALL command to the...

10CVSS8.1AI score0.03761EPSS
SaveExploits0References2
Rows per page
Query Builder