Lucene search
K

86 matches found

CNNVD
CNNVD
added 2026/02/11 12:0 a.m.2 views

ActFax ActiveFax Server 代码问题漏洞

ActFax ActiveFax Server is a fax server software developed by the Austrian company ActFax. Version 6.92 Build 0316 of ActFax ActiveFax Server has a code vulnerability. This vulnerability stems from an unquoted service path within the ActiveFaxServiceNT service, which may allow local attackers to...

8.5CVSS6.1AI score0.00018EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/12/22 7:21 a.m.2 views

CVE-2023-53954

ActFax 10.10 contains an unquoted service path vulnerability that allows local attackers to potentially escalate privileges by exploiting the ActiveFaxServiceNT service configuration. Attackers with write permissions to Program Files directories can inject a malicious ActSrvNT.exe executable to...

8.5CVSS7AI score0.00016EPSS
Exploits0References1
NVD
NVD
added 2025/12/19 9:15 p.m.2 views

CVE-2023-53954

ActFax 10.10 contains an unquoted service path vulnerability that allows local attackers to potentially escalate privileges by exploiting the ActiveFaxServiceNT service configuration. Attackers with write permissions to Program Files directories can inject a malicious ActSrvNT.exe executable to...

8.5CVSS0.00016EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/19 9:5 p.m.2 views

CVE-2023-53954 ActFax 10.10 Unquoted Path Services Privilege Escalation Vulnerability

ActFax 10.10 contains an unquoted service path vulnerability that allows local attackers to potentially escalate privileges by exploiting the ActiveFaxServiceNT service configuration. Attackers with write permissions to Program Files directories can inject a malicious ActSrvNT.exe executable to...

8.5CVSS6.6AI score0.00016EPSS
Exploits0References3
CVE
CVE
added 2025/12/19 9:5 p.m.5 views

CVE-2023-53954

CVE-2023-53954 concerns ActFax 10.10, which has an unquoted service path in the ActiveFaxServiceNT service. According to multiple sources, attackers with write access to Program Files can inject a malicious ActSrvNT.exe and, when the service restarts, achieve elevated system access. The vulnerabi...

8.5CVSS6.6AI score0.00016EPSS
Exploits0References3
EUVD
EUVD
added 2025/12/19 9:5 p.m.1 views

EUVD-2025-204605

ActFax 10.10 contains an unquoted service path vulnerability that allows local attackers to potentially escalate privileges by exploiting the ActiveFaxServiceNT service configuration. Attackers with write permissions to Program Files directories can inject a malicious ActSrvNT.exe executable to...

8.5CVSS6.5AI score0.00016EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/12/19 9:5 p.m.23 views

CVE-2023-53954 ActFax 10.10 Unquoted Path Services Privilege Escalation Vulnerability

ActFax 10.10 contains an unquoted service path vulnerability that allows local attackers to potentially escalate privileges by exploiting the ActiveFaxServiceNT service configuration. Attackers with write permissions to Program Files directories can inject a malicious ActSrvNT.exe executable to...

8.5CVSS0.00016EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/19 12:0 a.m.1 views

PT-2025-52525

Name of the Vulnerable Software and Affected Versions ActFax version 10.10 Description The software contains an unquoted service path vulnerability that may allow local attackers to escalate privileges. Specifically, the issue relates to the configuration of the ActiveFaxServiceNT service...

8.5CVSS6.6AI score0.00016EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/12/19 12:0 a.m.2 views

ActFax 代码问题漏洞

ActFax is a fax server software from Activefax Austria.ActiveFax can turn your computer into a virtual fax machine, realizing the transmission of fax and Email in Windows and UNIX applications at will, suitable for all sizes of networks and stand-alone use. A code issue vulnerability exists in...

8.5CVSS6.9AI score0.00016EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2013-7284

Malware in sbrugna...

9.3CVSS6.4AI score0.76011EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/08/10 6:14 p.m.4 views

CVE-2012-10043

A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality of the client interface. The application fails to properly validate the length of tab-delimited fields in .exp files, leading to unsafe usage of strcpy duri...

9.3CVSS7.5AI score0.05578EPSS
Exploits0References1
NVD
NVD
added 2025/08/08 7:15 p.m.3 views

CVE-2012-10043

A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality of the client interface. The application fails to properly validate the length of tab-delimited fields in .exp files, leading to unsafe usage of strcpy duri...

9.3CVSS0.05578EPSS
Exploits0References5
CVE
CVE
added 2025/08/08 6:9 p.m.12 views

CVE-2012-10043

ActFax Server 4.32 is affected by a stack-based buffer overflow in the Import Users from File function. The root cause is improper validation of the length of tab-delimited fields in .exp files, causing unsafe usage of strcpy() during CSV parsing. An attacker can compromise the system by crafting...

9.3CVSS7.2AI score0.05578EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/08/08 6:9 p.m.5 views

CVE-2012-10043 ActFax 4.32 Client Importer Buffer Overflow

A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality of the client interface. The application fails to properly validate the length of tab-delimited fields in .exp files, leading to unsafe usage of strcpy duri...

9.3CVSS7.5AI score0.05578EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/08/08 6:9 p.m.9 views

CVE-2012-10043 ActFax 4.32 Client Importer Buffer Overflow

A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality of the client interface. The application fails to properly validate the length of tab-delimited fields in .exp files, leading to unsafe usage of strcpy duri...

9.3CVSS0.05578EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/08/08 12:0 a.m.3 views

ActFax Server 安全漏洞

ActFax Server is a fax server software from ActFax Austria. A security vulnerability exists in ActFax Server version 4.32, which originates from an unvalidated .exp file field length in the Import User function, and could lead to a stack buffer overflow and arbitrary code execution...

9.3CVSS7.9AI score0.05578EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/08/08 12:0 a.m.4 views

PT-2025-32396 · Unknown · Actfax Server

Name of the Vulnerable Software and Affected Versions: ActFax Server version 4.32 Description: A stack-based buffer overflow vulnerability exists in the "Import Users from File" functionality of the client interface. The application does not properly validate the length of tab-delimited fields in...

9.3CVSS7.3AI score0.05578EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/08/07 8:31 p.m.4 views

CVE-2013-10064

A stack-based buffer overflow vulnerability exists in ActFax Server version 5.01. The server's RAW protocol interface fails to safely process user-supplied data in @F506 fax header fields due to insecure usage of strcpy. Remote attackers can exploit this vulnerability by sending specially crafted...

9.3CVSS7.6AI score0.76011EPSS
Exploits0References1
NVD
NVD
added 2025/08/05 8:15 p.m.2 views

CVE-2013-10064

A stack-based buffer overflow vulnerability exists in ActFax Server version 5.01. The server's RAW protocol interface fails to safely process user-supplied data in @F506 fax header fields due to insecure usage of strcpy. Remote attackers can exploit this vulnerability by sending specially crafted...

9.3CVSS0.76011EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/08/05 7:58 p.m.2 views

CVE-2013-10064 ActFax 5.01 RAW Server Buffer Overflow

A stack-based buffer overflow vulnerability exists in ActFax Server version 5.01. The server's RAW protocol interface fails to safely process user-supplied data in @F506 fax header fields due to insecure usage of strcpy. Remote attackers can exploit this vulnerability by sending specially crafted...

9.3CVSS7.6AI score0.76011EPSS
Exploits0References5
Rows per page
Query Builder