13 matches found
CVE-2026-38945
CVE-2026-38945 author: Rafael José Núñez Gulías company: Iberian Var Group Affected products: RayVentory Scan Engine 12.6 Update 8 and previous versions Raynet advisory: RSEC200967 rvia in Raynet executes a find command with improperly terminated search criteria to locate Java installations when...
CVE-2025-69599
CVE-2025-69599 author: Rafael José Núñez Gulías company: Iberian Var Group Affected products: RayVentory Scan Engine 12.6 Update 8 and previous versions Raynet advisory: RSEC200965 rvia in Raynet is vulnerable to an Uncontrolled Search Path Element issue. When loading shared objects and calling...
CVE-2025-69600
CVE-2025-69600 autor: Rafael José Núñez Gulías empresa: Iberian Var Group Productos afectados: RayVentory Scan Engine 12.6 Update 8 y versiones anteriores Aviso de Raynet: RSEC200966 Inyección de comandos en rvia de Raynet permite a los atacantes ejecutar comandos a través de las opciones...
RayVentory Scan Engine 安全漏洞
RayVentory Scan Engine is a network scanning engine developed by the German company RayVentory, designed for automatically discovering and collecting IT asset information. Version 12.6.4392.49 of the RayVentory Scan Engine contains a security vulnerability. This vulnerability stems from parameter...
CVE-2025-69600: Improper Neutralization of Special Elements used in a Command
Command injection in Raynet rvia RayVentory Scan Engine 12.6 Update 8 and previous versions allows adversaries to execute commands via getconfig, upload, inventory, and oracle options...
EUVD-2025-209737
RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to control the environment is a site-specific misconfiguration...
CVE-2025-69599
RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to control the environment is a site-specific misconfiguration...
CVE-2025-69599
RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to control the environment is a site-specific misconfiguration...
RayVentory Scan Engine 安全漏洞
RayVentory Scan Engine is a network scanning engine developed by the German company RayVentory, designed for automatically discovering and collecting IT asset information. Versions of RayVentory Scan Engine 12.6 Update 8 and earlier contain security vulnerabilities. These vulnerabilities allow...
CVE-2025-69599: Uncontrolled Search Path Element
RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to control the environment is a site-specific misconfiguration...
CVE-2025-69599
RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to control the environment is a site-specific misconfiguration...
CVE-2025-69599
The RayVentory Scan Engine (versions prior to 12.6 Update 9 ) is vulnerable to privilege escalation due to an uncontrolled search path element in the rvia component. Attackers who can manipulate the PATH environment variable can force the application to execute arbitrary binaries or load maliciou...
