Lucene search
+L

2666 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•3 views

CVE-2026-55979: Improper Access Control

An improper access control check in CatchPulse's named pipe communication interface could allow an attacker to invoke CatchPulse functions. This is limited to operations that enforce more restrictive security policies...

5.2CVSS5.8AI score0.00133EPSS
SaveExploits0References2
NVD
NVD
•added 2026/08/03 5:16 p.m.•25 views

CVE-2026-18606

A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files x86\Razer\RzUpdateEngineService\RzUpdateService.exe of the component Named Pipe Handler. Executing a manipulation of the argument...

8.5CVSS0.00162EPSS
SaveExploits0References5
CVE
CVE
•added 2026/08/03 4:15 p.m.•63 views

CVE-2026-18606

RCE-like local privilege escalation in Razer RzUpdateService 1.10.14.0 via Named Pipe Handler (RzUpdateService.exe). Manipulating lpThreadParameter is reported to cause improper privilege management; requires local access. Publicly available exploit noted; vendor contacted early. No remediation d...

8.5CVSS6.8AI score0.00162EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/08/03 4:15 p.m.•12 views

CVE-2026-18606 Razer RzUpdateService Named Pipe RzUpdateService.exe privileges management

A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files x86\Razer\RzUpdateEngineService\RzUpdateService.exe of the component Named Pipe Handler. Executing a manipulation of the argument...

8.5CVSS6.8AI score0.00162EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/08/03 4:15 p.m.•67 views

EUVD-2026-52351

A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files x86\Razer\RzUpdateEngineService\RzUpdateService.exe of the component Named Pipe Handler. Executing a manipulation of the argument...

8.5CVSS6.8AI score0.00162EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/08/03 4:15 p.m.•16 views

CVE-2026-18606

A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files x86\Razer\RzUpdateEngineService\RzUpdateService.exe of the component Named Pipe Handler. Executing a manipulation of the argument...

8.5CVSS6.8AI score0.00162EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2026/08/03 4:15 p.m.•65 views

CVE-2026-18606 Razer RzUpdateService Named Pipe RzUpdateService.exe privileges management

A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files x86\Razer\RzUpdateEngineService\RzUpdateService.exe of the component Named Pipe Handler. Executing a manipulation of the argument...

8.5CVSS0.00162EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/03 12:00 a.m.•1 views

CVE-2026-18606: Improper Privilege Management

A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files x86\Razer\RzUpdateEngineService\RzUpdateService.exe of the component Named Pipe Handler. Executing a manipulation of the argument...

8.5CVSS6.8AI score0.00162EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/03 12:00 a.m.•29 views

PT-2026-67433

A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:Program Files x86RazerRzUpdateEngineServiceRzUpdateService.exe of the component Named Pipe Handler. Executing a manipulation of the argument lpThreadParamete...

8.5CVSS6.8AI score0.00162EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/07/27 5:54 p.m.•12 views

CVE-2026-55578 Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injection

Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.6, the terminal feature in Pheditor uses an incomplete character blocklist to sanitize user-supplied commands before passing them to shellexec. After the fix for GHSA-9643-6xjp-vx57 which...

8.8CVSS6.3AI score0.00667EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/07/27 5:54 p.m.•43 views

CVE-2026-55578 Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injection

Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.6, the terminal feature in Pheditor uses an incomplete character blocklist to sanitize user-supplied commands before passing them to shellexec. After the fix for GHSA-9643-6xjp-vx57 which...

8.8CVSS0.00667EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/07/25 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-66141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled. CVE-2026-66141 Note that Nessus relies on the...

7.8CVSS5.9AI score0.00141EPSS
SaveExploits0References3
OSV
OSV
•added 2026/07/24 5:16 a.m.•13 views

DEBIAN-CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

7.8CVSS5.9AI score0.00141EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/24 5:16 a.m.•20 views

CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

7.8CVSS0.00141EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/07/24 5:16 a.m.•27 views

CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

7.8CVSS5.9AI score0.00141EPSS
SaveExploits0References5
OSV
OSV
•added 2026/07/24 5:16 a.m.•11 views

UBUNTU-CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

7.8CVSS5.9AI score0.00141EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/07/24 4:37 a.m.•13 views

CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

7.4CVSS5.9AI score0.00141EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/24 4:37 a.m.•19 views

EUVD-2026-48479

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

7.4CVSS5.9AI score0.00141EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/24 4:37 a.m.•129 views

CVE-2026-66141

Affected software : Exim before 4.99.5. Vulnerability : .forward privilege escalation due to mishandling of force_command for a pipe transport. Root cause : improper handling of force_command in a pipe transport within Exim, enabling a local attacker to escalate privileges. Impact : high severity...

7.8CVSS5.9AI score0.00141EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/07/24 4:37 a.m.•22 views

CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

7.4CVSS5.9AI score0.00141EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder