Lucene search
+L

170 matches found

Cvelist
Cvelist
•added 2025/04/10 6:57 p.m.•47 views

CVE-2025-23010

An Improper Link Resolution Before File Access 'Link Following' vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to manipulate file paths...

0.00415EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/10 6:57 p.m.•15 views

CVE-2025-23010

An Improper Link Resolution Before File Access 'Link Following' vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to manipulate file paths...

6.8AI score0.00415EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/10 6:57 p.m.•73 views

CVE-2025-23010

The SonicWall NetExtender Windows (32 and 64 bit) client is vulnerable to an Improper Link Resolution Before File Access ('Link Following') vulnerability. This flaw stems from an incorrect definition of the link before accessing a file, which can be exploited by an attacker to manipulate file pat...

7.2CVSS6.5AI score0.00415EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/10 6:55 p.m.•10 views

CVE-2025-23009

A local privilege escalation vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to trigger an arbitrary file deletion...

5.9AI score0.00368EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/10 6:55 p.m.•84 views

CVE-2025-23009

The SonicWall NetExtender Windows (32 and 64 bit) client is affected by a local privilege escalation vulnerability (CVE-2025-23009). This flaw stems from deficiencies in access control , which can be exploited by a low-privileged attacker to trigger arbitrary file deletion on the local system. Th...

7.2CVSS6AI score0.00368EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/10 6:55 p.m.•43 views

CVE-2025-23009

A local privilege escalation vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to trigger an arbitrary file deletion...

0.00368EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/10 6:55 p.m.•63 views

CVE-2025-23008

An improper privilege management vulnerability in the SonicWall NetExtender Windows 32 and 64 bit client allows a low privileged attacker to modify configurations...

0.0035EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/10 6:55 p.m.•102 views

CVE-2025-23008

The SonicWall NetExtender Windows (32 and 64 bit) client is affected by an improper privilege management vulnerability (CWE-250). This flaw allows a low privileged attacker to modify software configurations and potentially elevate privileges. The vulnerability is present in versions prior to 10.3...

7.2CVSS6.4AI score0.0035EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/10 6:55 p.m.•11 views

CVE-2025-23008

An improper privilege management vulnerability in the SonicWall NetExtender Windows 32 and 64 bit client allows a low privileged attacker to modify configurations...

6.7AI score0.0035EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/10 12:00 a.m.•20 views

SonicWALL NetExtender Windows client 安全漏洞

SonicWALL NetExtender Windows client is a Windows-based SSL VPN Virtual Private Network client application from SonicWALL USA. The SonicWALL NetExtender Windows client suffers from an improper link resolution vulnerability that stems from improper link resolution, which can be exploited by an...

7.2CVSS6.8AI score0.00415EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/10 12:00 a.m.•14 views

SonicWALL NetExtender Windows client 安全漏洞

SonicWall NetExtender Windows client is a Windows-based SSL VPN Virtual Private Network client application from SonicWALL USA. An elevation of privilege vulnerability exists in SonicWall NetExtender Windows client, which can be exploited by an attacker to elevate privileges and arbitrary file...

7.2CVSS7.2AI score0.00368EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/10 12:00 a.m.•2 views

CVE-2025-23009: Execution with Unnecessary Privileges

A local privilege escalation vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to trigger an arbitrary file deletion...

7.2CVSS6.8AI score0.00368EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/10 12:00 a.m.•2 views

CVE-2025-23010: Improper Link Resolution Before File Access

An Improper Link Resolution Before File Access 'Link Following' vulnerability in SonicWall NetExtender Windows 32 and 64 bit client which allows an attacker to manipulate file paths...

7.2CVSS6.8AI score0.00415EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/10 12:00 a.m.•1 views

CVE-2025-23008: Execution with Unnecessary Privileges

An improper privilege management vulnerability in the SonicWall NetExtender Windows 32 and 64 bit client allows a low privileged attacker to modify configurations...

7.2CVSS7.2AI score0.0035EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/10 12:00 a.m.•13 views

SonicWALL NetExtender Windows client 安全漏洞

SonicWall NetExtender Windows client is a Windows-based SSL VPN Virtual Private Network client application from SonicWALL USA. A privilege mismanagement vulnerability exists in the SonicWall NetExtender Windows client, which can be exploited by an attacker to modify the configuration and elevate...

7.2CVSS6.9AI score0.0035EPSS
SaveExploits0References1
SonicWall
SonicWall
•added 2025/04/08 8:58 p.m.•158 views

SonicWall NetExtender Windows Client Multiple Vulnerabilities

1 CVE-2025-23008 - SonicWall NetExtender Improper Privilege Management VulnerabilityAn improper privilege management vulnerability in the SonicWall NetExtender Windows 32 and 64 bit client allows a low privileged attacker to modify configurations. CVSS Score: 7.2 CVSS Vector:...

7.2CVSS7.2AI score0.00415EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/04/08 12:00 a.m.•22 views

PT-2025-15914 · Sonicwall · Sonicwall Netextender Windows

Name of the Vulnerable Software and Affected Versions: SonicWall NetExtender versions 10.3.1 and earlier Description: An Improper Link Resolution Before File Access 'Link Following' vulnerability in SonicWall NetExtender Windows 32 and 64 bit client allows an attacker to manipulate file paths. Th...

7.2CVSS6.9AI score0.00415EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
•added 2025/04/08 12:00 a.m.•25 views

PT-2025-15912 · Sonicwall · Sonicwall Netextender Windows

Name of the Vulnerable Software and Affected Versions: SonicWall NetExtender Windows affected versions not specified Description: The issue is related to improper privilege management, allowing a low-privileged attacker to modify configurations in the SonicWall NetExtender Windows client...

7.2CVSS6.7AI score0.0035EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
•added 2025/04/08 12:00 a.m.•14 views

PT-2025-15913 · Sonicwall · Sonicwall Netextender

Name of the Vulnerable Software and Affected Versions: SonicWall NetExtender versions affected versions not specified Description: A local privilege escalation vulnerability in the SonicWall NetExtender Windows client allows an attacker to trigger an arbitrary file deletion. This issue is related...

7.2CVSS6.9AI score0.00368EPSS
SaveExploits0References16
CNVD
CNVD
•added 2025/02/17 12:00 a.m.•11 views

SonicWall NetExtender Windows client elevation of privilege vulnerability (CNVD-2025-12370)

SonicWall NetExtender Windows client is a software application from SonicWALL USA that allows remote users to connect to remote networks in a secure manner. Provides simple and secure access for Windows and Linux users. An elevation of privilege vulnerability exists in the SonicWall NetExtender...

5.5CVSS6.5AI score0.002EPSS
SaveExploits0References1
Rows per page
Query Builder