11 matches found
CVE-2026-38945
CVE-2026-38945 auteur : Rafael José Núñez Gulías entreprise : Iberian Var Group Produits concernés : RayVentory Scan Engine 12.6 Update 8 et versions antérieures Avis de Raynet : RSEC200967 rvia dans Raynet exécute une commande find avec des critères de recherche mal terminés pour localiser les...
CVE-2025-69600
CVE-2025-69600 автор: Rafael José Núñez Gulías компания: Iberian Var Group Затронутые продукты: RayVentory Scan Engine 12.6 Update 8 и предыдущие версии Уведомление Raynet: RSEC200966 Внедрение команд в rvia от Raynet позволяет злоумышленникам выполнять команды через опции getconfig, upload,...
CVE-2025-69599
CVE-2025-69599 작성자: Rafael José Núñez Gulías 회사: Iberian Var Group 영향받는 제품: RayVentory Scan Engine 12.6 Update 8 및 이전 버전 Raynet 권고: RSEC200965 Raynet의 rvia는 Uncontrolled Search Path Element통제되지 않은 검색 경로 요소 문제에 취약합니다. 공유 객체를 로드하고 시스템 바이너리예: .so 및 헬퍼 바이너리를 호출할 때 상대 경로를 사용하여 호출하므로, 사용자는 PATH 환경 변수 조...
RayVentory Scan Engine 安全漏洞
RayVentory Scan Engine is a network scanning engine developed by the German company RayVentory, designed for automatically discovering and collecting IT asset information. Version 12.6.4392.49 of the RayVentory Scan Engine contains a security vulnerability. This vulnerability stems from parameter...
EUVD-2025-209737
RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to control the environment is a site-specific misconfiguration...
CVE-2025-69599
RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to control the environment is a site-specific misconfiguration...
CVE-2025-69599
RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to control the environment is a site-specific misconfiguration...
CVE-2025-69599
RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to control the environment is a site-specific misconfiguration...
RayVentory Scan Engine 安全漏洞
RayVentory Scan Engine is a network scanning engine developed by the German company RayVentory, designed for automatically discovering and collecting IT asset information. Versions of RayVentory Scan Engine 12.6 Update 8 and earlier contain security vulnerabilities. These vulnerabilities allow...
CVE-2025-69599
CVE-2025-69599 affects RayVentory Scan Engine (12.6 Update 8 and earlier). The root cause is privilege escalation when an attacker can influence the PATH environment variable, as described by multiple sources. Red Hat and related advisories corroborate that this condition enables elevated privile...
