CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-31464
https://notcve.org/view.php?id=CVE-2022-31464
16 Jun 2022 — Insecure permissions configuration in Adaware Protect v1.2.439.4251 allows attackers to escalate privileges via changing the service binary path. Una configuración no segura de los permisos en Adaware Protect versión v1.2.439.4251, permite a atacantes escalar privilegios por medio del cambio de la ruta binaria del servicio • https://r0h1rr1m.medium.com/adaware-protect-local-privilege-escalation-through-insecure-service-permissions-44d0eeb6c933 • CWE-732: Incorrect Permission Assignment for Critical Resource •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2021-32023
https://notcve.org/view.php?id=CVE-2021-32023
10 Nov 2021 — An elevation of privilege vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to potentially execute code in the context of a BlackBerry Cylance service that has admin rights on the system. Una vulnerabilidad de elevación de privilegios en el broker de mensajes de BlackBerry Protect para Windows versión(es) 1574 y anteriores, podría permitir a un atacante ejecutar potencialmente código en el contexto de un servicio de BlackBerry ... • https://support.blackberry.com/kb/articleDetail?articleNumber=000088685 •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2021-32022
https://notcve.org/view.php?id=CVE-2021-32022
10 Nov 2021 — A low privileged delete vulnerability using CEF RPC server of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to potentially execute code in the context of a BlackBerry Cylance service that has admin rights on the system and gaining the ability to delete data from the local system. Una vulnerabilidad de eliminación de pocos privilegios en el servidor CEF RPC de BlackBerry Protect para Windows versión(es) 1574 y anteriores, podría permitir a un atacante ejecutar po... • https://support.blackberry.com/kb/articleDetail?articleNumber=000088685 •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2021-32021
https://notcve.org/view.php?id=CVE-2021-32021
10 Nov 2021 — A denial of service vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to potentially execute code in the context of a BlackBerry Cylance service that has admin rights on the system. Una vulnerabilidad de denegación de servicio en el corredor de mensajes de BlackBerry Protect para Windows, versión(es) 1574 y anteriores, podría permitir a un atacante ejecutar potencialmente código en el contexto de un servicio de BlackBerry Cylan... • https://support.blackberry.com/kb/articleDetail?articleNumber=000088685 •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2018-1000160
https://notcve.org/view.php?id=CVE-2018-1000160
18 Apr 2018 — RisingStack protect version 1.2.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in isXss() function in lib/rules/xss.js that can result in dangerous XSS strings being validated as safe. This attack appears to be exploitable via A number of XSS strings(26) detailed in the GitHub issue #16. RisingStack protect, en su versión 1.2.0 y anteriores, contiene una vulnerabilidad de Cross Site Scripting (XSS) en la función isXss() en lib/rules/xss.js que puede resultar en que las cadenas XSS peligro... • http://embed.plnkr.co/xHbhB29JWWyMUMeHsLrm • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •