Lucene search
+L

180 matches found

osv_cve
osv_cve
•added 2021/05/18 11:15 a.m.•15 views

CVE-2021-3423

Uncontrolled Search Path Element vulnerability in the openssl component as used in Bitdefender GravityZone Business Security allows an attacker to load a third party DLL to elevate privileges. This issue affects Bitdefender GravityZone Business Security versions prior to 6.6.23.329...

7.8CVSS7.1AI score0.0021EPSS
SaveExploits0References1
Prion
Prion
•added 2021/05/18 11:15 a.m.•30 views

Path traversal

Uncontrolled Search Path Element vulnerability in the openssl component as used in Bitdefender GravityZone Business Security allows an attacker to load a third party DLL to elevate privileges. This issue affects Bitdefender GravityZone Business Security versions prior to 6.6.23.329...

4.6CVSS7.5AI score0.0021EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/05/18 11:00 a.m.•35 views

CVE-2021-3423 Privilege escalation in Bitdefender GravityZone Business Security

Uncontrolled Search Path Element vulnerability in the openssl component as used in Bitdefender GravityZone Business Security allows an attacker to load a third party DLL to elevate privileges. This issue affects Bitdefender GravityZone Business Security versions prior to 6.6.23.329...

7.8CVSS7.7AI score0.0021EPSS
SaveExploits0References1
CVE
CVE
•added 2021/05/18 11:00 a.m.•70 views

CVE-2021-3423

CVE-2021-3423 describes an uncontrolled search path element issue in the OpenSSL usage within Bitdefender GravityZone Business Security that enables local privilege escalation by loading a third-party DLL. Affected versions are GravityZone Business Security prior to 6.6.23.329. The root cause is ...

7.8CVSS7.5AI score0.0021EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/05/18 9:00 a.m.•11 views

CVE-2021-3423

Uncontrolled Search Path Element vulnerability in the openssl component as used in Bitdefender GravityZone Business Security allows an attacker to load a third party DLL to elevate privileges. This issue affects Bitdefender GravityZone Business Security versions prior to 6.6.23.329...

7.8CVSS7.1AI score0.0021EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/18 12:00 a.m.•9 views

CVE-2021-3423: Uncontrolled Search Path Element

Uncontrolled Search Path Element vulnerability in the openssl component as used in Bitdefender GravityZone Business Security allows an attacker to load a third party DLL to elevate privileges. This issue affects Bitdefender GravityZone Business Security versions prior to 6.6.23.329...

7.8CVSS5.8AI score0.0021EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/05/18 12:00 a.m.•6 views

PT-2021-20406

Name of the Vulnerable Software and Affected Versions: Bitdefender GravityZone Business Security versions prior to 6.6.23.329 Description: The issue is related to an Uncontrolled Search Path Element vulnerability in the openssl component used in Bitdefender GravityZone Business Security. This...

7.8CVSS0.0021EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/05/18 12:00 a.m.•19 views

Bitdefender GravityZone Business Security code-related vulnerabilities

Bitdefender GravityZone Business is an application from the American company Bitdefender. A scanning software. A code issue vulnerability exists in Bitdefender GravityZone Business Security prior to version 6.6.23.329, which stems from an uncontrolled search path element vulnerability in the...

7.8CVSS7.5AI score0.0021EPSS
SaveExploits0References2
NVD
NVD
•added 2018/10/30 7:29 p.m.•31 views

CVE-2017-8931

Bitdefender GravityZone VMware appliance before 6.2.1-35 might allow attackers to gain access with root privileges via unspecified vectors...

10CVSS9.6AI score0.01518EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2018/10/30 7:29 p.m.•21 views

CVE-2017-8931

Bitdefender GravityZone VMware appliance before 6.2.1-35 might allow attackers to gain access with root privileges via unspecified vectors...

9.8CVSS5.8AI score0.01518EPSS
SaveExploits0References1
Prion
Prion
•added 2018/10/30 7:29 p.m.•27 views

Design/Logic Flaw

Bitdefender GravityZone VMware appliance before 6.2.1-35 might allow attackers to gain access with root privileges via unspecified vectors...

10CVSS9.4AI score0.01518EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2018/10/30 7:00 p.m.•64 views

CVE-2017-8931

The CVE-2017-8931 entry affects the Bitdefender GravityZone VMware appliance prior to version 6.2.1-35, where an attacker could gain root privileges via unspecified vectors. The NVD entry lists a CVSSv3 base score of 9.8 (CRITICAL) with network attack vector and privileges required: none. Connect...

10CVSS9.4AI score0.01518EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/10/30 7:00 p.m.•31 views

CVE-2017-8931

Bitdefender GravityZone VMware appliance before 6.2.1-35 might allow attackers to gain access with root privileges via unspecified vectors...

9.6AI score0.01518EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/30 12:00 a.m.•6 views

CVE-2017-8931: Undefined Security Weakness

Bitdefender GravityZone VMware appliance before 6.2.1-35 might allow attackers to gain access with root privileges via unspecified vectors...

10CVSS8.3AI score0.01518EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/10/30 12:00 a.m.•9 views

PT-2018-8455

Name of the Vulnerable Software and Affected Versions Bitdefender GravityZone VMware appliance versions prior to 6.2.1-35 Description The issue allows attackers to gain access with root privileges via unspecified vectors. Recommendations For versions prior to 6.2.1-35, update to version 6.2.1-35 ...

10CVSS0.01518EPSS
SaveExploits0References3
NVD
NVD
•added 2018/10/24 10:29 p.m.•27 views

CVE-2018-8955

The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which allows remote attackers to execute arbitrary code by changing the filename while leaving the file's digital signature unchanged...

9.8CVSS9.7AI score0.04263EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2018/10/24 10:29 p.m.•10 views

CVE-2018-8955

The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which allows remote attackers to execute arbitrary code by changing the filename while leaving the file's digital signature unchanged...

9.8CVSS6.1AI score0.04263EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2018/10/24 10:00 p.m.•41 views

CVE-2018-8955

The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which allows remote attackers to execute arbitrary code by changing the filename while leaving the file's digital signature unchanged...

9.7AI score0.04263EPSS
SaveExploits1References4
CVE
CVE
•added 2018/10/24 10:00 p.m.•81 views

CVE-2018-8955

CVE-2018-8955 affects the BitDefender GravityZone installer. The root cause is that the installer relies on an encoded string in a filename to determine the URL for installation metadata, allowing a remote attacker to execute arbitrary code by changing the filename while the file’s digital signat...

9.8CVSS9.6AI score0.04263EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/24 12:00 a.m.•7 views

CVE-2018-8955: Improper Verification of Cryptographic Signature

The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which allows remote attackers to execute arbitrary code by changing the filename while leaving the file's digital signature unchanged...

9.8CVSS8.7AI score0.04263EPSS
SaveExploits1References2
Rows per page
Query Builder