10746 matches found
CVE-2023-32179 VIPRE Antivirus Plus FPQuarTransfer Link Following Local Privilege Escalation Vulnerability
VIPRE Antivirus Plus FPQuarTransfer Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Antivirus Plus. An attacker must first obtain the ability to execute low-privileged code on the target...
CVE-2023-32179
VIPRE Antivirus Plus FPQuarTransfer vulnerability (CVE-2023-32179) affects the FPQuarTransfer method. The root cause is abuse via symbolic links that allows a local attacker with low-privileged code execution to delete arbitrary files and escalate to SYSTEM, enabling arbitrary code execution. No ...
CVE-2023-32179 VIPRE Antivirus Plus FPQuarTransfer Link Following Local Privilege Escalation Vulnerability
VIPRE Antivirus Plus FPQuarTransfer Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Antivirus Plus. An attacker must first obtain the ability to execute low-privileged code on the target...
CVE-2023-32178
VIPRE Antivirus Plus is affected by CVE-2023-32178 in the TelFileTransfer method. The flaw allows local attackers to escalate privileges to SYSTEM by abusing symbolic links to delete arbitrary files. A low-privilege code execution prerequisite is required on the target system. The vulnerability i...
CVE-2023-32178 VIPRE Antivirus Plus TelFileTransfer Link Following Local Privilege Escalation Vulnerability
VIPRE Antivirus Plus TelFileTransfer Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Antivirus Plus. An attacker must first obtain the ability to execute low-privileged code on the target...
CVE-2023-32177 VIPRE Antivirus Plus DeleteHistoryFile Directory Traversal Local Privilege Escalation Vulnerability
VIPRE Antivirus Plus DeleteHistoryFile Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Antivirus Plus. An attacker must first obtain the ability to execute low-privileged code on the...
CVE-2023-32177
CVE-2023-32177 concerns VIPRE Antivirus Plus DeleteHistoryFile Directory Traversal Local Privilege Escalation. The flaw is a lack of validation of a user-supplied path before file operations in DeleteHistoryFile, enabling a local attacker who already has low-privileged code execution to escalate ...
CVE-2023-32176 VIPRE Antivirus Plus SetPrivateConfig Directory Traversal Local Privilege Escalation Vulnerability
VIPRE Antivirus Plus SetPrivateConfig Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Antivirus Plus. An attacker must first obtain the ability to execute low-privileged code on the...
CVE-2023-32176
VIPRE Antivirus Plus contains a local privilege escalation in SetPrivateConfig, caused by lack of validation of a user-supplied path before file operations. Exploitation requires at least low-privileged code execution on the target and can lead to SYSTEM-level arbitrary code execution. The root c...
CVE-2023-32175 VIPRE Antivirus Plus Link Following Local Privilege Escalation Vulnerability
VIPRE Antivirus Plus Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Antivirus Plus. An attacker must first obtain the ability to execute low-privileged code on the target system in order ...
CVE-2023-32175
The CVE-2023-32175 issue affects VIPRE Antivirus Plus, specifically the Anti Malware Service. A local attacker can create a symbolic link to abuse the service and create arbitrary files, enabling privilege escalation to SYSTEM and arbitrary code execution. Vector is LOCAL with LOW privilege requi...
Merative Merge DICOM Toolkit 安全漏洞
Merative Merge DICOM Toolkit is a comprehensive API from Merative that complies with the latest DICOM standards. A security vulnerability exists in Merative Merge DICOM Toolkit C/C++ versions prior to 5.18.0 that stems from the presence of an out-of-bounds read vulnerability...
D-Link G416 安全漏洞
The D-Link G416 is the AX1500 4G+ Smart Router launched by AUO in June 2025 and supports Wi-Fi 6, AI Smart Optimization and 4G LTE Cat 6 network with up to 300Mbps internet speed. The D-Link G416 suffers from a command injection remote code execution vulnerability that originates in an HTTP servi...
VIPRE Antivirus 安全漏洞
VIPRE Antivirus is a security software from VIPRE USA that provides all the features needed to protect PCs from virus infections and other security threats. A security vulnerability exists in VIPRE Antivirus Plus that stems from a specific flaw in the anti-malware service that allows a local...
D-Link G416 安全漏洞
D-Link G416 is the AX1500 4G+ Smart Router launched by AUO in June 2025 , which supports Wi-Fi 6, AI Smart Optimization and 4G LTE Cat 6 network with up to 300Mbps internet speed. The D-Link G416 suffers from a buffer overflow vulnerability that stems from the ovpncfg stack-based buffer overflow...
CVE-2024-3197 The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes
The The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom attributes in the plugin's widgets in all versions up to, and including, 5.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
WordPress plugin Plus Addons for Elementor 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress plugin Plus Addons for Elementor 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-24324 · WordPress · The Plus Addons For Elementor
Name of the Vulnerable Software and Affected Versions: The Plus Addons for Elementor plugin for WordPress versions up to, and including, 5.4.2 Description: The issue is related to Stored Cross-Site Scripting via custom attributes in the plugin's widgets due to insufficient input sanitization and...
