Lucene search
K

924 matches found

OSV
OSV
added 2025/12/16 3:15 p.m.2 views

UBUNTU-CVE-2025-68239

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: restore write access before closing files opened by openexec bmregisterwrite opens an executable file using openexec, which internally calls doopenexecat and denies write access on the file to avoid modification while...

5.7AI score0.00164EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2025/12/11 12:0 a.m.2 views

PT-2025-50742

Name of the Vulnerable Software and Affected Versions Genexus Protection Server version 9.7.2.10 Description The Genexus Protection Server software contains a flaw due to an unquoted service path in the configuration of the protsrvservice Windows service. This allows attackers to potentially...

8.7CVSS7.4AI score0.00322EPSS
Exploits0References6
OSV
OSV
added 2025/12/10 3:5 p.m.5 views

CLSA-2025-1765379145 golang: Fix of CVE-2025-47906

CVE-2025-47906: fix issue where certain strings could cause executables in PATH variable to be returned by LookPath function...

6.5CVSS6.6AI score0.00489EPSS
Exploits1References1
Zero Day Initiative
Zero Day Initiative
added 2025/12/10 12:0 a.m.5 views

Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vim for Windows. User interaction is required to exploit this vulnerability in that the target must open a malicious file and perform one of a set of specific actions in the editor. The specific flaw...

7.8CVSS7.5AI score0.00431EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2025/12/09 8:3 a.m.3 views

os/exec: Unexpected paths returned from LookPath in os/exec

A path handling flaw has been discovered in the os/exec go package. If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", ".", and "..", can result in the binaries listed in the PATH being unexpectedly returned...

6.5CVSS5.7AI score0.00489EPSS
Exploits1References8
RedhatCVE
RedhatCVE
added 2025/12/05 9:34 p.m.37 views

CVE-2024-58278

perl2exe = V30.10C contains an arbitrary code execution vulnerability that allows local authenticated attackers to execute malicious scripts. Attackers can control the 0th argument of packed executables to execute another executable, allowing them to bypass restrictions and gain unauthorized acce...

8.5CVSS7.8AI score0.00158EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/04 9:31 p.m.3 views

EUVD-2025-201268

perl2exe = V30.10C contains an arbitrary code execution vulnerability that allows local authenticated attackers to execute malicious scripts. Attackers can control the 0th argument of packed executables to execute another executable, allowing them to bypass restrictions and gain unauthorized acce...

8.5CVSS7.3AI score0.00158EPSS
Exploits0References5
NVD
NVD
added 2025/12/04 9:16 p.m.2 views

CVE-2024-58278

perl2exe = V30.10C contains an arbitrary code execution vulnerability that allows local authenticated attackers to execute malicious scripts. Attackers can control the 0th argument of packed executables to execute another executable, allowing them to bypass restrictions and gain unauthorized acce...

8.5CVSS0.00158EPSS
Exploits0References4
CVE
CVE
added 2025/12/04 8:42 p.m.9 views

CVE-2024-58278

IndigoSTAR Perl2exe

8.5CVSS7.4AI score0.00158EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/12/04 8:42 p.m.22 views

CVE-2024-58278 IndigoSTAR Software - perl2exe <= V30.10C - Arbitrary Code Execution

perl2exe = V30.10C contains an arbitrary code execution vulnerability that allows local authenticated attackers to execute malicious scripts. Attackers can control the 0th argument of packed executables to execute another executable, allowing them to bypass restrictions and gain unauthorized acce...

8.5CVSS0.00158EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/12/04 8:42 p.m.2 views

CVE-2024-58278 IndigoSTAR Software - perl2exe <= V30.10C - Arbitrary Code Execution

perl2exe = V30.10C contains an arbitrary code execution vulnerability that allows local authenticated attackers to execute malicious scripts. Attackers can control the 0th argument of packed executables to execute another executable, allowing them to bypass restrictions and gain unauthorized acce...

8.5CVSS7.4AI score0.00158EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/12/04 12:0 a.m.3 views

PT-2025-49134

perl2exe = V30.10C contains an arbitrary code execution vulnerability that allows local authenticated attackers to execute malicious scripts. Attackers can control the 0th argument of packed executables to execute another executable, allowing them to bypass restrictions and gain unauthorized acce...

8.5CVSS7.8AI score0.00158EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/12/04 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-66476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious...

7.8CVSS8AI score0.00431EPSS
Exploits0References2
NVD
NVD
added 2025/12/02 10:16 p.m.2 views

CVE-2025-66476

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

7.8CVSS0.00431EPSS
Exploits0References4
EUVD
EUVD
added 2025/12/02 9:49 p.m.3 views

EUVD-2025-200373

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

7.8CVSS6.9AI score0.00431EPSS
Exploits0References3
AlpineLinux
AlpineLinux
added 2025/12/02 9:49 p.m.4 views

CVE-2025-66476

Vim is an open source, command line text editor. Prior to version 9.1.1947, an uncontrolled search path vulnerability on Windows allows Vim to execute malicious executables placed in the current working directory for the current edited file. On Windows, when using cmd.exe as a shell, Vim resolves...

7.8CVSS7.4AI score0.00431EPSS
Exploits0References4
EUVD
EUVD
added 2025/12/02 9:31 p.m.4 views

EUVD-2025-200324

NMIS/BioDose V22.02 and previous versions' installation directory paths by default have insecure file permissions, which in certain deployment scenarios can enable users on client workstations to modify the program executables and libraries...

8CVSS6.4AI score0.00099EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/02 9:31 p.m.5 views

EUVD-2025-200321

NMIS/BioDose software V22.02 and previous versions contain executable binaries with plain text hard-coded passwords. These hard-coded passwords could allow unauthorized access to both the application and database...

8.4CVSS6.3AI score0.001EPSS
Exploits0References2
OSV
OSV
added 2025/12/02 9:15 p.m.3 views

CVE-2025-64642

NMIS/BioDose V22.02 and previous versions' installation directory paths by default have insecure file permissions, which in certain deployment scenarios can enable users on client workstations to modify the program executables and libraries...

7.8CVSS5.8AI score0.00099EPSS
Exploits0References1
NVD
NVD
added 2025/12/02 9:15 p.m.4 views

CVE-2025-64642

NMIS/BioDose V22.02 and previous versions' installation directory paths by default have insecure file permissions, which in certain deployment scenarios can enable users on client workstations to modify the program executables and libraries...

8CVSS0.00099EPSS
Exploits0References1
Rows per page
Query Builder