Lucene search
K

115 matches found

SUSE CVE
SUSE CVE
added 2024/04/06 1:59 a.m.1 views

SUSE CVE-2024-3116

pgAdmin = 8.4 is affected by a Remote Code Execution RCE vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the...

9.9CVSS8.2AI score0.90682EPSS
Exploits5References3
Veracode
Veracode
added 2024/04/05 6:58 a.m.26 views

Remote Code Execution (RCE)

pgAdmin is vulnerable to Remote Code Execution RCE. The vulnerability is due improper validation within the binary path API, which allows attackers to execute arbitrary code on the server...

9.8CVSS8.3AI score0.90682EPSS
Exploits5References6Affected Software1
Github Security Blog
Github Security Blog
added 2024/04/04 3:30 p.m.42 views

pgAdmin Remote Code Execution (RCE) vulnerability

pgAdmin = 8.4 is affected by a Remote Code Execution RCE vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the...

9.8CVSS9AI score0.90682EPSS
Exploits5References7Affected Software1
OSV
OSV
added 2024/04/04 3:30 p.m.15 views

GHSA-27JX-FFW8-XRQV pgAdmin Remote Code Execution (RCE) vulnerability

pgAdmin = 8.4 is affected by a Remote Code Execution RCE vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the...

7.4CVSS9AI score0.90682EPSS
Exploits5References7
OSV
OSV
added 2024/04/04 3:15 p.m.7 views

CVE-2024-3116

pgAdmin = 8.4 is affected by a Remote Code Execution RCE vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the...

9.8CVSS8.1AI score0.90682EPSS
Exploits5References4
Cvelist
Cvelist
added 2024/04/04 2:59 p.m.22 views

CVE-2024-3116 Remote Code Execution Vulnerability through the validate binary path API in pgAdmin 4

pgAdmin = 8.4 is affected by a Remote Code Execution RCE vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the...

7.4CVSS8.1AI score0.90682EPSS
Exploits5References3
CVE
CVE
added 2024/04/04 2:59 p.m.148 views

CVE-2024-3116

CVE-2024-3116 affects pgAdmin

9.8CVSS9AI score0.90682EPSS
Exploits5References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/04 2:59 p.m.25 views

CVE-2024-3116 Remote Code Execution Vulnerability through the validate binary path API in pgAdmin 4

pgAdmin = 8.4 is affected by a Remote Code Execution RCE vulnerability through the validate binary path API. This vulnerability allows attackers to execute arbitrary code on the server hosting PGAdmin, posing a severe risk to the database management system's integrity and the security of the...

7.4CVSS9AI score0.90682EPSS
Exploits5References3
CNNVD
CNNVD
added 2024/04/04 12:0 a.m.1 views

pgAdmin 安全漏洞

pgAdmin is an open source administration and development platform for the open source database PostgreSQL. A security vulnerability exists in pgAdmin 8.4 and prior versions that stems from a remote code execution RCE vulnerability in the binary path API...

9.8CVSS8.1AI score0.90682EPSS
Exploits5References6
OSV
OSV
added 2024/01/07 7:15 a.m.1 views

CVE-2023-7208

A vulnerability classified as critical was found in Totolink X2000RV2 2.0.0-B20230727.10434. This vulnerability affects the function formTmultiAP of the file /bin/boa. The manipulation leads to buffer overflow. VDB-249742 is the identifier assigned to this vulnerability. NOTE: The vendor was...

9.8CVSS5.9AI score
Exploits0References3
OSV
OSV
added 2023/01/27 3:15 p.m.0 views

CVE-2022-47632

Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege management, and improper certificate validation. Attackers can place malicious DLLs into %PROGRAMDATA%\Razer\Synapse3\Service\bin if they do so before the service is installed a...

6.8CVSS5.8AI score0.00062EPSS
Exploits4References5
Veracode
Veracode
added 2022/12/14 2:27 a.m.26 views

Remote Code Execution (RCE)

pgadmin4 is vulnerable to remote code execution. The vulnerability exists in validatebinarypath function of init.py due to lack of validation of the binary path which allows an attacker to inject and execute malicious query parameters via the pgAdmin server...

8.8CVSS8.9AI score0.87793EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2022/09/23 7:15 p.m.1 views

CVE-2022-3263

The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a local user with limited privileges to modify the service binary path and start malicious commands with SYSTEM privileges...

7.8CVSS5.8AI score0.00028EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/09/23 6:30 p.m.7 views

CVE-2022-3263 Measuresoft ScadaPro Server Improper Access Control

The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a local user with limited privileges to modify the service binary path and start malicious commands with SYSTEM privileges...

7.8CVSS7.7AI score0.00028EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/09/23 6:30 p.m.13 views

CVE-2022-3263 Measuresoft ScadaPro Server Improper Access Control

The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a local user with limited privileges to modify the service binary path and start malicious commands with SYSTEM privileges...

7.8CVSS7.8AI score0.00028EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/09/06 5:15 p.m.1 views

CVE-2022-40109

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa...

9.8CVSS7.3AI score0.00322EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/08/16 12:0 a.m.0 views

SWFTools 缓冲区错误漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools that stems from a heap buffer overflow in /bin/png2swf+0x552cea...

5.5CVSS6AI score0.00049EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/06/16 7:15 p.m.1 views

CVE-2022-31464

Insecure permissions configuration in Adaware Protect v1.2.439.4251 allows attackers to escalate privileges via changing the service binary path...

7.8CVSS5.4AI score0.0003EPSS
Exploits1References3
OSV
OSV
added 2022/06/16 7:15 p.m.0 views

CVE-2022-31464

Insecure permissions configuration in Adaware Protect v1.2.439.4251 allows attackers to escalate privileges via changing the service binary path...

7.8CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2022/06/16 7:15 p.m.8 views

CVE-2022-31464

Insecure permissions configuration in Adaware Protect v1.2.439.4251 allows attackers to escalate privileges via changing the service binary path...

7.8CVSS0.0003EPSS
Exploits1References2
Rows per page
Query Builder