Lucene search
+L

6316 matches found

NVD
NVD
•added 2025/01/28 7:15 p.m.•19 views

CVE-2025-24479

A Local Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to a default setting in Windows and allows access to the Command Prompt as a higher privileged user...

8.6CVSS0.00174EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/28 6:52 p.m.•34 views

CVE-2025-24479 FactoryTalk® View Machine Edition - Local Code Injection

A Local Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to a default setting in Windows and allows access to the Command Prompt as a higher privileged user...

8.6CVSS0.00174EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/28 6:52 p.m.•90 views

CVE-2025-24479

CVE-2025-24479 affects Rockwell Automation FactoryTalk View Machine Edition (FactoryTalk View ME) and related FactoryTalk components. The issue is a Local Code Execution vulnerability stemming from a Windows default setting that allows access to the Command Prompt as a higher-privileged user. Imp...

8.6CVSS7.5AI score0.00174EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/28 6:52 p.m.•7 views

CVE-2025-24479 FactoryTalk® View Machine Edition - Local Code Injection

A Local Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to a default setting in Windows and allows access to the Command Prompt as a higher privileged user...

8.6CVSS6.9AI score0.00174EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/28 12:00 a.m.•17 views

PT-2025-5371 · Rockwell Automation · Factorytalk® View Site Edition

Name of the Vulnerable Software and Affected Versions: Product and version affected versions not specified Description: A Local Code Injection issue exists due to incorrect default permissions, allowing for the execution of DLLs with higher-level permissions. Recommendations: At the moment, there...

7CVSS7.5AI score0.00252EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/28 12:00 a.m.•10 views

CVE-2025-24479: Incorrect Authorization

A Local Code Execution Vulnerability exists in the product and version listed above. The vulnerability is due to a default setting in Windows and allows access to the Command Prompt as a higher privileged user...

8.6CVSS6AI score0.00174EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/28 12:00 a.m.•11 views

CVE-2025-24482: Improper Control of Generation of Code

A Local Code Injection Vulnerability exists in the product and version listed above. The vulnerability is due to incorrect default permissions and allows for DLLs to be executed with higher level permissions...

7CVSS5.9AI score0.00252EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/22 12:00 a.m.•25 views

IBM Sterling B2B Integrator code-related vulnerabilities

IBM Sterling B2B Integrator is a suite of software from International Business Machines IBM that integrates critical B2B processes, transactions, and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A code issue vulnerability exist...

8.8CVSS7.3AI score0.00968EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•22 views

PT-2025-5369 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A Local Code Execution issue exists due to a default setting in Windows, allowing access to the Command Prompt as a higher privileged user. This issue is related to insufficient authorizati...

8.6CVSS7.9AI score0.00174EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2025/01/21 12:00 a.m.•32 views

PT-2025-3122 · Unknown · Rar Extractor - Unarchiver

Name of the Vulnerable Software and Affected Versions: RAR Extractor - Unarchiver Free and Pro version 6.4.0 Description: The issue allows local attackers to inject arbitrary code, potentially leading to remote control and unauthorized access to sensitive user data via the exploit combined.dylib...

5.5CVSS6.9AI score0.00559EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
•added 2025/01/20 12:00 a.m.•23 views

Adobe Photoshop node_modules Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Adobe Photoshop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the...

7.3CVSS7AI score0.00298EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/17 2:15 p.m.•30 views

CVE-2024-13502

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Newtec/iDirect NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM allows Local Code Inclusion.This issue affects NTC2218, NTC2250, NTC2299: from 1.0.1.1 through 2.2.6.19. The commitmulticast pa...

9.3CVSS0.00637EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/01/17 2:01 p.m.•33 views

CVE-2024-13502 A command injection in the NTC2218, NTC2250, NTC2299 modems' web interfaces allows to exeucte arbitrary shell commands.

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Newtec/iDirect NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM allows Local Code Inclusion.This issue affects NTC2218, NTC2250, NTC2299: from 1.0.1.1 through 2.2.6.19. The commitmulticast pa...

9.3CVSS0.00637EPSS
SaveExploits0References2
CVE
CVE
•added 2025/01/17 2:01 p.m.•88 views

CVE-2024-13502

CVE-2024-13502 affects Newtec/iDirect NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM. The issue is an OS command injection caused by improper neutralization: the commit_multicast web interface page passes untrusted input to an eval in a bash script, enabling arbitrary shell commands (Local Code...

9.3CVSS7.2AI score0.00637EPSS
SaveExploits0References2
NVD
NVD
•added 2025/01/17 9:15 a.m.•26 views

CVE-2024-11139

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow local attackers to exploit these issues to potentially execute arbitrary code when opening a malicious project file...

4.6CVSS0.00228EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/17 12:00 a.m.•21 views

PT-2025-2192 · Newtec · Newtec/Idirect Ntc2299 +2

Name of the Vulnerable Software and Affected Versions: Newtec/iDirect NTC2218, NTC2250, NTC2299 versions 1.0.1.1 through 2.2.6.19 Description: The issue affects the commit multicast page in the modem's web administration interface, which improperly parses incoming data from the request before...

9.3CVSS6.8AI score0.00637EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/17 12:00 a.m.•11 views

CVE-2024-13502: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Newtec/iDirect NTC2218, NTC2250, NTC2299 on Linux, PowerPC, ARM allows Local Code Inclusion.This issue affects NTC2218, NTC2250, NTC2299: from 1.0.1.1 through 2.2.6.19. The commitmulticast pa...

9.3CVSS6AI score0.00637EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/01/15 11:15 p.m.•21 views

CVE-2024-55503

An issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a crafted script to the DYLDINSERTLIBRARIES component...

3.3CVSS6.1AI score0.00419EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/01/15 11:15 p.m.•17 views

UBUNTU-CVE-2024-55503

An issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a crafted script to the DYLDINSERTLIBRARIES component...

3.3CVSS6.2AI score0.00419EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/01/15 5:15 a.m.•17 views

CVE-2025-22394

Dell Display Manager, versions prior to 2.3.2.18, contain a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to code execution and possibly privilege escalation...

7CVSS6.2AI score0.00113EPSS
SaveExploits0References1
Rows per page
Query Builder