Lucene search
+L

641 matches found

CNNVD
CNNVD
added 2025/12/11 12:0 a.m.12 views

TeamViewer DEX Client 安全漏洞

TeamViewer DEX Client is a digital employee experience and endpoint management software from TeamViewer Germany. A security vulnerability exists in TeamViewer DEX Client versions prior to 25.11 that stems from a specially crafted request to bypass file integrity validation, which could lead to th...

8.8CVSS7.2AI score0.00294EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.13 views

PT-2025-50595

A command injection vulnerability was discovered in TeamViewer DEX former 1E DEX, specifically within the 1E-Nomad-GetCmContentLocations instruction prior V19.2. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables...

7.2CVSS8AI score0.01177EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/11 12:0 a.m.8 views

TeamViewer DEX Client 安全漏洞

TeamViewer DEX Client is a digital employee experience and endpoint management software from TeamViewer Germany. A security vulnerability exists in TeamViewer DEX Client versions prior to V17.1 that stems from improper handling of executable search paths, which could lead to elevation of privileg...

6.7CVSS7AI score0.00179EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/11 12:0 a.m.11 views

TeamViewer DEX Client 安全漏洞

TeamViewer DEX Client is a digital employee experience and endpoint management software from TeamViewer Germany. A security vulnerability exists in TeamViewer DEX Client that stems from improper input validation and could lead to remote execution of arbitrary commands...

7.2CVSS6.8AI score0.00884EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.14 views

PT-2025-50592

A vulnerability in TeamViewer DEX Client former 1E Client - Content Distribution Service NomadBranch.exe prior version 25.11 for Windows allows malicious actors to coerce the service into transmitting data to an arbitrary internal IP address, potentially leaking sensitive information...

4.3CVSS6.9AI score0.00199EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/11 12:0 a.m.10 views

TeamViewer DEX Client 安全漏洞

TeamViewer DEX Client is a digital employee experience and endpoint management software from TeamViewer Germany. A security vulnerability exists in TeamViewer DEX Client versions prior to V21.1 that stems from improper input validation and could lead to remote execution of arbitrary commands...

7.2CVSS6.8AI score0.01115EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/11 12:0 a.m.8 views

TeamViewer DEX Client 安全漏洞

TeamViewer DEX Client is a digital employee experience and endpoint management software from TeamViewer Germany. An elevation of privilege vulnerability exists in TeamViewer DEX Client, which can be exploited by an attacker to cause elevation of privilege and execute arbitrary code...

6.7CVSS6AI score0.00162EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.9 views

PT-2025-50602

A privilege escalation vulnerability was discovered in TeamViewer DEX former 1E DEX, specifically within the 1E-Exchange-NomadClientHealth-ConfigureGeneralSetting instruction prior V3.4. Improper protection of the execution path on the local device allows attackers, with local access to the devic...

6.5CVSS7.9AI score0.00162EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/11 12:0 a.m.6 views

TeamViewer DEX Client 安全漏洞

TeamViewer DEX Client is a digital employee experience and endpoint management software from TeamViewer Germany. A security vulnerability exists in TeamViewer DEX Client versions prior to 25.11 that stems from the service being forced to transfer data to arbitrary internal IP addresses, which cou...

6.5CVSS6.3AI score0.00199EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/11 12:0 a.m.6 views

TeamViewer DEX Client 安全漏洞

TeamViewer DEX Client is a digital employee experience and endpoint management software from TeamViewer Germany. A security vulnerability exists in versions prior to TeamViewer DEX Client V15 that stems from improper input validation and could lead to remote execution of arbitrary commands...

7.2CVSS6.8AI score0.00884EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.11 views

PT-2025-50600

A command injection vulnerability was discovered in TeamViewer DEX former 1E DEX, specifically within the 1E-ConfigMgrConsoleExtensions instructions. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote...

6.8CVSS8AI score0.00884EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.14 views

PT-2025-50591

Name of the Vulnerable Software and Affected Versions TeamViewer DEX Client versions prior to 25.11 Description A flaw exists in the TeamViewer DEX Client Content Distribution Service NomadBranch.exe that allows attackers to circumvent file integrity checks. By supplying a valid hash for a...

8.8CVSS7.3AI score0.00294EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.10 views

PT-2025-50589

Name of the Vulnerable Software and Affected Versions TeamViewer DEX Client versions prior to 25.11 Description A flaw exists in the Content Distribution Service NomadBranch.exe of TeamViewer DEX Client, potentially leading to a denial of service. Specifically, a crafted command can cause the...

6.5CVSS6.6AI score0.00208EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2025/11/22 8:30 a.m.5 views

CVE-2025-13318 Booking Calendar Contact Form <= 1.2.60 - Missing Authorization to Unauthenticated Arbitrary Booking Confirmation via 'dex_bccf_ipn' Parameter

The Booking Calendar Contact Form plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.2.60. This is due to missing authorization checks and payment verification in the dexbccfcheckIPNverification function. This makes it possible for unauthenticated...

5.3CVSS5.6AI score0.00297EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/10/11 7:23 a.m.9 views

CVE-2025-21046

Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list...

2.4CVSS6.3AI score0.00148EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/10 7:15 a.m.7 views

CVE-2025-21046

Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list...

2.4CVSS5.8AI score0.00148EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/10 7:15 a.m.7 views

CVE-2025-21046

Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list...

2.4CVSS0.00148EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/10 6:33 a.m.4 views

CVE-2025-21046

Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list...

2.4CVSS5.9AI score0.00148EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/10 6:33 a.m.15 views

CVE-2025-21046

Samsung DeX's WindowManager improper access control lets a physically present attacker temporarily view the recent apps list before SMR Oct-2025 Release 1. Affected product: Samsung DeX (prior to the SMR Oct-2025 Release 1). Root cause: access control flaw in WindowManager. Impact: local disclosu...

2.4CVSS5.9AI score0.00148EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/10/10 6:33 a.m.17 views

CVE-2025-21046

Improper access control in WindowManager in Samsung DeX prior to SMR Oct-2025 Release 1 allows physical attackers to temporarily access to recent app list...

2.4CVSS0.00148EPSS
SaveExploits0References1
Rows per page
Query Builder