Lucene search
+L

1210 matches found

Zero Day Initiative
Zero Day Initiative
•added 2025/12/19 12:00 a.m.•19 views

RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the SAS...

7.8CVSS7.5AI score0.00206EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/12/10 12:00 a.m.•21 views

IceWarp14 X-File-Operation Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of IceWarp. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the X-File-Operation header. The issue results from the lack of proper validatio...

9.8CVSS7.6AI score0.01547EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/11/25 12:00 a.m.•17 views

ASUS MyASUS Incorrect Permission Assignment Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of ASUS MyASUS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AsusSwitchAgent...

7.8CVSS7.4AI score0.00133EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/04 5:16 a.m.•10 views

CVE-2025-12683

The service employed by Everything, running as SYSTEM, communicates with the lower privileged Everything GUI via a named pipe. The named pipe has a NULL DACL and thus provides all users full permission over it; leading to potential Service Denial Of Service or Privilege escalationonly if chained...

8.8CVSS0.00092EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/29 12:00 a.m.•9 views

CVE-2025-9869: Improper Link Resolution Before File Access

Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in ord...

7.8CVSS6.5AI score0.00195EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/29 12:00 a.m.•3 views

CVE-2025-9871: Improper Link Resolution Before File Access

Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in...

7.8CVSS6.5AI score0.00195EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/29 12:00 a.m.•4 views

CVE-2025-9870: Improper Link Resolution Before File Access

Razer Synapse 3 RazerPhilipsHueUninstall Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target...

7.8CVSS6.5AI score0.00195EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/23 12:15 p.m.•14 views

CVE-2025-62395

A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data...

4.3CVSS0.00248EPSS
SaveExploits0References2
OSV
OSV
•added 2025/10/23 12:15 p.m.•26 views

UBUNTU-CVE-2025-62395

A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data...

4.3CVSS5.8AI score0.00248EPSS
SaveExploits0References4
CVE
CVE
•added 2025/10/23 11:29 a.m.•53 views

CVE-2025-62395

CVE-2025-62395 affects Moodle LMS via a flaw in the cohort search web service. The issue allows users with permissions in lower contexts to access cohort information from the system context, potentially exposing restricted administrative data. The Connected documents confirm the vulnerability des...

4.3CVSS6.1AI score0.00248EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2025/10/23 11:29 a.m.•16 views

EUVD-2025-35666

A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data...

4.3CVSS6AI score0.00248EPSS
SaveExploits0References3
OSV
OSV
•added 2025/10/23 11:29 a.m.•10 views

CVE-2025-62395 Moodle: external cohort search service leaks system cohort data

A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data...

4.3CVSS5.9AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/10/16 3:19 p.m.•11 views

CVE-2025-62395

A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data...

4.3CVSS6.5AI score0.00248EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2018-18602

Malware in sbrugna...

7.8CVSS7.5AI score0.00614EPSS
SaveExploits3References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2017-8573

Malware in sbrugna...

9.3CVSS8.8AI score0.06487EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2020-9367

Malware in sbrugna...

7.8CVSS7.6AI score0.01909EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2020-9341

Malware in sbrugna...

9CVSS8.8AI score0.07543EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2017-8575

Malware in sbrugna...

9.3CVSS8.8AI score0.03675EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2022-38746

Malicious code in bioql PyPI...

7.8CVSS7.7AI score0.00707EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2021-29973

Malicious code in bioql PyPI...

9.3CVSS7.6AI score0.02178EPSS
SaveExploits0References1
Rows per page
Query Builder