Lucene search
+L

137 matches found

Veracode
Veracode
added 2024/04/05 6:58 a.m.30 views

Remote Code Execution (RCE)

pgAdmin is vulnerable to Remote Code Execution RCE. The vulnerability is due improper validation within the binary path API, which allows attackers to execute arbitrary code on the server...

9.8CVSS8.3AI score0.64846EPSS
SaveExploits5References6Affected Software1
OSV
OSV
added 2024/04/04 3:30 p.m.15 views

GHSA-27JX-FFW8-XRQV pgAdmin Remote Code Execution (RCE) vulnerability

pgAdmin = 8.4 is affected by a Remote Code Execution RCE vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the...

7.4CVSS9AI score0.64846EPSS
SaveExploits5References7
Github Security Blog
Github Security Blog
added 2024/04/04 3:30 p.m.63 views

pgAdmin Remote Code Execution (RCE) vulnerability

pgAdmin = 8.4 is affected by a Remote Code Execution RCE vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the...

9.8CVSS9AI score0.64846EPSS
SaveExploits5References7Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/04 2:59 p.m.27 views

CVE-2024-3116 Remote Code Execution Vulnerability through the validate binary path API in pgAdmin 4

pgAdmin = 8.4 is affected by a Remote Code Execution RCE vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the...

7.4CVSS9AI score0.64846EPSS
SaveExploits5References3
Cvelist
Cvelist
added 2024/04/04 2:59 p.m.77 views

CVE-2024-3116 Remote Code Execution Vulnerability through the validate binary path API in pgAdmin 4

pgAdmin = 8.4 is affected by a Remote Code Execution RCE vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the...

7.4CVSS8.1AI score0.64846EPSS
SaveExploits5References3
CVE
CVE
added 2024/04/04 2:59 p.m.222 views

CVE-2024-3116

CVE-2024-3116 affects pgAdmin

9.8CVSS9AI score0.64846EPSS
SaveExploits5References4Affected Software1
OSV
OSV
added 2024/04/04 2:59 p.m.12 views

CVE-2024-3116 Remote Code Execution Vulnerability through the validate binary path API in pgAdmin 4

pgAdmin = 8.4 is affected by a Remote Code Execution RCE vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the...

7.4CVSS7.4AI score0.64846EPSS
SaveExploits5References7
CNNVD
CNNVD
added 2024/04/04 12:0 a.m.5 views

pgAdmin 安全漏洞

pgAdmin is an open source administration and development platform for the open source database PostgreSQL. A security vulnerability exists in pgAdmin 8.4 and prior versions that stems from a remote code execution RCE vulnerability in the binary path API...

9.8CVSS8.1AI score0.64846EPSS
SaveExploits5References6
OSV
OSV
added 2024/01/07 7:15 a.m.7 views

CVE-2023-7208

A vulnerability classified as critical was found in Totolink X2000RV2 2.0.0-B20230727.10434. This vulnerability affects the function formTmultiAP of the file /bin/boa. The manipulation leads to buffer overflow. VDB-249742 is the identifier assigned to this vulnerability. NOTE: The vendor was...

9.8CVSS5.9AI score0.01747EPSS
SaveExploits1References3
OSV
OSV
added 2023/01/27 3:15 p.m.7 views

CVE-2022-47632

Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege management, and improper certificate validation. Attackers can place malicious DLLs into %PROGRAMDATA%\Razer\Synapse3\Service\bin if they do so before the service is installed a...

6.8CVSS5.8AI score0.00633EPSS
SaveExploits4References5
Veracode
Veracode
added 2022/12/14 2:27 a.m.30 views

Remote Code Execution (RCE)

pgadmin4 is vulnerable to remote code execution. The vulnerability exists in validatebinarypath function of init.py due to lack of validation of the binary path which allows an attacker to inject and execute malicious query parameters via the pgAdmin server...

8.8CVSS8.9AI score0.79933EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2022/09/23 7:15 p.m.6 views

CVE-2022-3263

The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a local user with limited privileges to modify the service binary path and start malicious commands with SYSTEM privileges...

7.8CVSS5.8AI score0.0025EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/09/23 6:30 p.m.9 views

CVE-2022-3263 Measuresoft ScadaPro Server Improper Access Control

The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a local user with limited privileges to modify the service binary path and start malicious commands with SYSTEM privileges...

7.8CVSS7.7AI score0.0025EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/09/23 6:30 p.m.35 views

CVE-2022-3263 Measuresoft ScadaPro Server Improper Access Control

The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a local user with limited privileges to modify the service binary path and start malicious commands with SYSTEM privileges...

7.8CVSS7.8AI score0.0025EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/09/06 5:15 p.m.3 views

CVE-2022-40109

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa...

9.8CVSS7.3AI score0.00755EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/08/16 12:0 a.m.8 views

SWFTools 缓冲区错误漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools that stems from a heap buffer overflow in /bin/png2swf+0x552cea...

5.5CVSS6AI score0.00286EPSS
SaveExploits1References2
NVD
NVD
added 2022/06/16 7:15 p.m.24 views

CVE-2022-31464

Insecure permissions configuration in Adaware Protect v1.2.439.4251 allows attackers to escalate privileges via changing the service binary path...

7.8CVSS0.00364EPSS
SaveExploits1References2
OSV
OSV
added 2022/06/16 7:15 p.m.7 views

CVE-2022-31464

Insecure permissions configuration in Adaware Protect v1.2.439.4251 allows attackers to escalate privileges via changing the service binary path...

7.8CVSS5.8AI score0.00364EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/06/16 7:15 p.m.2 views

CVE-2022-31464

Insecure permissions configuration in Adaware Protect v1.2.439.4251 allows attackers to escalate privileges via changing the service binary path...

7.8CVSS5.4AI score0.00364EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/06/16 12:0 a.m.3 views

Adaware Protect 安全漏洞

Adaware Protect is a free antivirus program from Adaware Canada. It is used for online security to protect your entire computer from suspicious websites. A security vulnerability exists in Adaware Protect version v1.2.439.4251 that stems from an insecure privilege configuration that allows an...

7.8CVSS7.4AI score0.00364EPSS
SaveExploits1References3
Rows per page
Query Builder