Lucene search
K

12 matches found

Cvelist
Cvelist
added 2026/02/25 1:33 a.m.22 views

CVE-2026-2914

CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs...

8.5CVSS0.00007EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/25 1:33 a.m.2 views

CVE-2026-2914

CyberArk Endpoint Privilege Manager Agent versions 25.10.0 and lower allow potential unauthorized privilege elevation leveraging CyberArk elevation dialogs...

8.5CVSS5.3AI score0.00007EPSS
Exploits0References2
NVD
NVD
added 2025/06/16 2:15 p.m.6 views

CVE-2025-36632

In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could execute code with SYSTEM privilege...

7.8CVSS0.00063EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/01/16 12:0 a.m.2 views

PT-2025-1787 · Octopus · Octopus Kubernetes Agent +1

Name of the Vulnerable Software and Affected Versions: Octopus Kubernetes worker or agent versions 1 through 2 Description: In affected versions of the Octopus Kubernetes worker or agent, sensitive variables could be written to the Kubernetes script pod log in clear-text. This issue was identifie...

6.5CVSS6.9AI score0.00244EPSS
Exploits0References5
OSV
OSV
added 2024/12/31 5:15 p.m.0 views

CVE-2024-55955

An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents between versions 20.0.1-9400 and 20.0.1-23340 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged...

7.3CVSS6AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/12/12 12:0 a.m.2 views

PT-2023-31411 · Elastic · Agent +2

Name of the Vulnerable Software and Affected Versions: Beats versions prior to 7.17.16 Beats versions prior to 8.11.3 Elastic Agent versions prior to 7.17.16 Elastic Agent versions prior to 8.11.3 Description: An issue was discovered whereby Beats and Elastic Agent would log a raw event in its ow...

6.8CVSS6.5AI score0.00444EPSS
Exploits0References10
CNNVD
CNNVD
added 2022/06/14 12:0 a.m.3 views

SAP Host Agent 代码问题漏洞

SAP Host Agent is a suite of agent programs from SAP Germany that support a number of lifecycle management tasks such as operating system monitoring, database monitoring, and system instance monitoring. A code issue vulnerability exists in SAP NetWeaver, ABAP Platform, and SAP Host Agent. An...

4.3CVSS5.5AI score0.00148EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/01/12 12:0 a.m.2 views

Palo Alto Networks Cortex XDR 后置链接漏洞

Palo Alto Networks Cortex XDR is a security operations platform for remote endpoint-based detection from Palo Alto Networks Malaysia. A backlink vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows, which allows a local user to delete arbitrary system files and compromise...

7.1CVSS7.3AI score0.0004EPSS
Exploits0References4
OSV
OSV
added 2021/10/12 7:15 p.m.0 views

CVE-2021-29644

Hitachi JP1/IT Desktop Management 2 Agent 9 through 12 contains a remote code execution vulnerability because of an Integer Overflow. An attacker with network access to port 31016 may exploit this issue to execute code with unrestricted privileges on the underlying OS...

9.8CVSS7.9AI score
Exploits0References1
CNNVD
CNNVD
added 2021/08/05 12:0 a.m.2 views

Acronis True Image 信任管理问题漏洞

Acronis True Image is a famous data backup and restore software from Acronis Singapore. The software can be used to create drive and disk images and can restore the image when a clean system is needed. Acronis True Image based on Windows platform 2021 Update 4 and earlier versions, Acronis True...

8.1CVSS7.7AI score0.00155EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/03/19 12:0 a.m.2 views

Tenable Network Security Nessus 安全漏洞

Tenable Network Security Nessus is an open source system vulnerability scanner from Tenable Network Security, USA. A security vulnerability exists in Nessus Agent versions 7.2.0 through 8.2.2, which can be exploited by attackers to obtain a token...

7.2CVSS6.6AI score0.00042EPSS
Exploits0References6
Metasploit
Metasploit
added 2018/06/22 8:7 a.m.26 views

Quest KACE Systems Management Command Injection

This module exploits a command injection vulnerability in Quest KACE Systems Management Appliance version 8.0.318 and possibly prior. The downloadagentinstaller.php file allows unauthenticated users to execute arbitrary commands as the web server user www. A valid Organization ID is required. The...

9.8CVSS9.9AI score0.93443EPSS
Exploits7
Rows per page
Query Builder