Lucene search
+L

41 matches found

EUVD
EUVD
•added 2026/07/31 12:30 a.m.•27 views

EUVD-2026-51329

The RCU II+ and Multiload II+ are vulnerable to an unauthenticated service that exposes a debug interface granting full root-level access to the embedded system. This vulnerability stems from a network-accessible port running a Target Communications Framework TCF service that does not require any...

8.8CVSS5.9AI score0.00458EPSS
SaveExploits0References7
vulnersOsv
vulnersOsv
•added 2026/05/12 6:30 p.m.•6 views

com.jalalkiswani:jk-app-web (>=6.2.0, <=6.4.0), com.jalalkiswani:jk-app-webstack (>=6.2.0, <=6.4.0) +9 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.5.72)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.72 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.jalalkiswani:jk-app-web =6.2.0, =6.2.0, =6.0.0, =6.0.0, =5.2.5, =5.2.5,...

9.1CVSS7.3AI score0.01221EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/05/12 6:30 p.m.•6 views

com.jalalkiswani:jk-app-web (>=6.2.0, <=6.4.0), com.jalalkiswani:jk-app-webstack (>=6.2.0, <=6.4.0) +9 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.5.72)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.72 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.jalalkiswani:jk-app-web =6.2.0, =6.2.0, =6.0.0, =6.0.0, =5.2.5, =5.2.5,...

7.3CVSS7.2AI score0.00646EPSS
SaveExploits0
NVD
NVD
•added 2026/02/06 5:16 p.m.•32 views

CVE-2019-25266

Wondershare Application Framework Service 2.4.3.231 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific directory...

8.5CVSS0.0015EPSS
SaveExploits0References4
CVE
CVE
•added 2026/02/06 4:41 p.m.•34 views

CVE-2019-25266

Wundersoft Wondershare Application Framework Service 2.4.3.231 is affected by an unquoted service path vulnerability that can let local attackers execute arbitrary code with elevated privileges by placing a malicious executable in specific directories to hijack the service’s execution context. Af...

8.5CVSS8.2AI score0.0015EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/02/06 4:41 p.m.•13 views

CVE-2019-25266

Wondershare Application Framework Service 2.4.3.231 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific directory...

8.5CVSS6.2AI score0.0015EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
•added 2026/02/06 12:00 a.m.•25 views

Wondershare Application Framework Service code-related vulnerabilities

Wondershare Application Framework Service is a backend infrastructure service component developed by Wondershare Technology. Version 2.4.3.231 of Wondershare Application Framework Service contains a code vulnerability. This vulnerability stems from service paths that lack quotation marks, which m...

8.5CVSS8.5AI score0.0015EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/06 12:00 a.m.•10 views

CVE-2019-25266: Unquoted Search Path or Element

Wondershare Application Framework Service 2.4.3.231 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted service path by placing malicious executables in specific directory...

8.5CVSS8.2AI score0.0015EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/01 3:16 p.m.•22 views

CVE-2020-37048

Iskysoft Application Framework Service 2.4.3.241 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious executables that would ...

8.5CVSS0.00169EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/02/01 2:38 p.m.•13 views

CVE-2020-37048

Iskysoft Application Framework Service 2.4.3.241 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious executables that would ...

8.5CVSS6.7AI score0.00169EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/02/01 12:00 a.m.•31 views

PT-2026-5578

Iskysoft Application Framework Service 2.4.3.241 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious executables that would ...

8.5CVSS6.2AI score0.00169EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/01 12:00 a.m.•9 views

CVE-2020-37048: Unquoted Search Path or Element

Iskysoft Application Framework Service 2.4.3.241 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated privileges. Attackers can exploit the unquoted path in the service configuration to inject malicious executables that would ...

8.5CVSS6.5AI score0.00169EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/01 12:00 a.m.•27 views

Iskysoft Application Framework Service code-related vulnerabilities

Iskysoft Application Framework Service is a backend core basic service component provided by Iskysoft Corporation in the United States. Version 2.4.3.241 of Iskysoft Application Framework Service contains a code vulnerability. This vulnerability arises from the lack of quotation marks around...

8.5CVSS6.8AI score0.00169EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2021-13089

Malware in sbrugna...

9.8CVSS8.6AI score0.00339EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•25 views

EUVD-2013-3561

Malware in sbrugna...

5CVSS5.8AI score0.01991EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/05/22 5:21 a.m.•27 views

CVE-2013-3627

FrameworkService.exe in McAfee Framework Service in McAfee Managed Agent MA before 4.5.0.1927 and 4.6 before 4.6.0.3258 allows remote attackers to cause a denial of service service crash via a malformed HTTP request...

5CVSS5.8AI score0.01991EPSS
SaveExploits1References1
NVD
NVD
•added 2024/11/25 10:15 a.m.•54 views

CVE-2020-12491

Improper control of framework service permissions with possibility of some sensitive device information leakage...

4.8CVSS0.00189EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/25 10:08 a.m.•74 views

CVE-2020-12491

CVE-2020-12491 concerns Vivo Framework Services. The vulnerability arises from improper control of framework service permissions, potentially leaking some sensitive device information. Affected: Vivo Framework Services (pre-fix versions; some sources cite vulnerability before version 11). Impact:...

4.8CVSS5.8AI score0.00189EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2024/01/23 2:43 p.m.•2 views

com.jalalkiswani:j-app-service (>=7.0.0-pre-release, <=7.0.2), com.jalalkiswani:j-app-web (>=7.0.0-pre-release, <=7.0.2) +107 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (22.0.3)

org.keycloak:keycloak-core MAVEN version 22.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.jalalkiswani:j-app-service =7.0.0-pre-release, =7.0.0-pre-release, =7.0.0-pre-release,...

6.1CVSS0.01109EPSS
SaveExploits0
osv_cve
osv_cve
•added 2023/02/17 10:15 p.m.•24 views

CVE-2021-26277

The framework service handles pendingIntent incorrectly, allowing a malicious application with certain privileges to perform privileged actions...

9.8CVSS5.8AI score0.00339EPSS
SaveExploits0References1
Rows per page
Query Builder