Lucene search
+L

3351 matches found

Positive Technologies
Positive Technologies
added 2026/01/12 12:00 a.m.26 views

PT-2026-2270

Name of the Vulnerable Software and Affected Versions Quest KACE Desktop Authority versions through 11.3.1 Description Quest KACE Desktop Authority through version 11.3.1 has insecure permissions on the Named Pipes used for inter-process communication. Named Pipes are used to enable communication...

5.3CVSS6.6AI score0.002EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/01/12 12:00 a.m.31 views

CVE-2025-67813

Quest KACE Desktop Authority through 11.3.1 has Insecure Permissions on the Named Pipes used for inter-process communication...

0.002EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 11:40 a.m.22 views

CVE-2001-1518

RunAs runas.exe in Windows 2000 only creates one session instance at a time, which allows local users to cause a denial of service RunAs hang by creating a named pipe session with the authentication server without any request for service. NOTE: the vendor disputes this vulnerability, however the...

2.1CVSS6.8AI score0.03491EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:35 a.m.15 views

CVE-2021-41065

An issue was discovered in Listary through 6. An attacker can create a \\.\pipe\Listary.listaryService named pipe and wait for a privileged user to open a session on the Listary installed host. Listary will automatically access the named pipe and the attacker will be able to duplicate the...

7.3CVSS6.7AI score0.00534EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:58 a.m.15 views

CVE-2023-31019

NVIDIA GPU Display Driver for Windows contains a vulnerability in wksServicePlugin.dll, where the driver implementation does not restrict or incorrectly restricts access from the named pipe server to a connecting client, which may lead to potential impersonation to the client's secure context...

7.8CVSS6.8AI score0.00166EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:54 a.m.10 views

CVE-2021-41031

A relative path traversal vulnerability CWE-23 in FortiClient for Windows versions 7.0.2 and prior, 6.4.6 and prior and 6.2.9 and below may allow a local unprivileged attacker to escalate their privileges to SYSTEM via the named pipe responsible for FortiESNAC service...

7.8CVSS6.8AI score0.00473EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:41 a.m.11 views

CVE-1999-0849

Denial of service in BIND named via maxdname...

5CVSS7AI score0.02649EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:39 a.m.13 views

CVE-1999-0851

Denial of service in BIND named via naptr...

2.1CVSS7AI score0.00398EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.24 views

PT-2026-27775

Name of the Vulnerable Software and Affected Versions BIND versions 9.20.0 through 9.20.20 BIND versions 9.21.0 through 9.21.19 BIND versions 9.20.9-S1 through 9.20.20-S1 Description A use-after-return issue exists in the named server when processing DNS queries signed with SIG0. A crafted DNS...

5.4CVSS5.8AI score0.0036EPSS
SaveExploits0References38
RedhatCVE
RedhatCVE
added 2025/12/23 12:25 a.m.13 views

CVE-2025-67826

An issue was discovered in K7 Ultimate Security 17.0.2045. A Local Privilege Escalation LPE vulnerability in the K7 Ultimate Security antivirus can be exploited by a local unprivileged user on default installations of the product. Insecure access to a named pipe allows unprivileged users to edit...

7.7CVSS6.6AI score0.00145EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/22 3:16 p.m.8 views

CVE-2025-67826

An issue was discovered in K7 Ultimate Security 17.0.2045. A Local Privilege Escalation LPE vulnerability in the K7 Ultimate Security antivirus can be exploited by a local unprivileged user on default installations of the product. Insecure access to a named pipe allows unprivileged users to edit...

7.7CVSS5.8AI score0.00145EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/22 3:16 p.m.10 views

CVE-2025-67826

An issue was discovered in K7 Ultimate Security 17.0.2045. A Local Privilege Escalation LPE vulnerability in the K7 Ultimate Security antivirus can be exploited by a local unprivileged user on default installations of the product. Insecure access to a named pipe allows unprivileged users to edit...

7.7CVSS0.00145EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/22 12:00 a.m.30 views

CVE-2025-67826

The CVE-2025-67826 entry concerns K7 Ultimate Security 17.0.2045, where a Local Privilege Escalation exists in the antivirus. The underlying issue is insecure access to a named pipe that allows a local unprivileged user to edit any registry key, enabling a full SYSTEM compromise. This is a local,...

7.7CVSS6.2AI score0.00145EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/22 12:00 a.m.4 views

CVE-2025-67826

An issue was discovered in K7 Ultimate Security 17.0.2045. A Local Privilege Escalation LPE vulnerability in the K7 Ultimate Security antivirus can be exploited by a local unprivileged user on default installations of the product. Insecure access to a named pipe allows unprivileged users to edit...

6.2AI score0.00145EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/22 12:00 a.m.11 views

PT-2025-52652

Name of the Vulnerable Software and Affected Versions K7 Ultimate Security version 17.0.2045 Description A local privilege escalation issue exists in K7 Ultimate Security antivirus. A local unprivileged user on default installations can exploit insecure access to a named pipe to modify any regist...

7.7CVSS6.4AI score0.00145EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2025/12/22 12:00 a.m.40 views

CVE-2025-67826

An issue was discovered in K7 Ultimate Security 17.0.2045. A Local Privilege Escalation LPE vulnerability in the K7 Ultimate Security antivirus can be exploited by a local unprivileged user on default installations of the product. Insecure access to a named pipe allows unprivileged users to edit...

0.00145EPSS
SaveExploits0References2
Veracode
Veracode
added 2025/12/13 7:29 a.m.12 views

Remote Code Execution

SGLang is vulnerable to Remote Code Execution. The vulnerability is due to the manipulation of the argument serializednamedtensors, where the function main of the file /updateweightsfromtensor results in deserialization, and attackers can launch the attack remotely by exploiting this vulnerabilit...

7.5CVSS5.7AI score0.00404EPSS
SaveExploits0References6Affected Software1
SUSE CVE
SUSE CVE
added 2025/12/12 1:24 a.m.23 views

SUSE CVE-2002-1219

Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records RR...

7.5CVSS8.2AI score0.12322EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2025/12/06 7:56 p.m.266 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

PrintSpoofer Details !Licensehttps://img.shields.io/badge...

8.5CVSS7.2AI score0.48043EPSS
SaveExploits8
Zero Day Initiative
Zero Day Initiative
added 2025/11/25 12:00 a.m.13 views

ASUS MyASUS Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of ASUS MyASUS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AsusSwitchAgent...

7.8CVSS7.4AI score0.00133EPSS
SaveExploits0References1
Rows per page
Query Builder