Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
privilege vulnerabilities and exploits
(subscribe to this query)
7.8
CVSSv3
CVE-2018-10711
The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write Machine Specific Registers (MSRs). This could be leveraged to exec...
Asrock F-stream
Asrock A-tuning
Asrock Restart To Uefi
Asrock Rgbled
1 EDB exploit
7.1
CVSSv3
CVE-2018-10710
The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local mali...
Asrock F-stream
Asrock A-tuning
Asrock Restart To Uefi
Asrock Rgbled
1 EDB exploit
7.8
CVSSv3
CVE-2018-10712
The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ...
Asrock F-stream
Asrock A-tuning
Asrock Restart To Uefi
Asrock Rgbled
1 EDB exploit
NA
CVE-2008-1625
aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests.
Avast Avast Antivirus Home 4.7.1098
Avast Avast Antivirus Home 4.7.869
Avast Avast Antivirus Home 4.7.1043
Avast Avast Antivirus Home 4.7.844
Avast Avast Antivirus Home 4.7.827
Avast Avast Antivirus Professional 4.7.827
Avast Avast Antivirus Professional 4.7.1043
Avast Avast Antivirus Professional 4.7.844
Avast Avast Antivirus Professional 4.7.1098
1 EDB exploit
9.8
CVSSv3
CVE-2012-4284
A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the setuid-set ViscosityHelper binary, which could let a remote malicious user execute arbitrary code
Sparklabs Viscosity 1.4.1
2 EDB exploits
7.8
CVSSv3
CVE-2018-18858
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client up to and including 1.37 for macOS. An attacker can communicate with an unprotected XPC service and directly execute arbitrary OS commands as root or load a potentially malicious kern...
Liquidvpn Liquidvpn
1 EDB exploit
7.8
CVSSv3
CVE-2017-6178
The IofCallDriver function in USBPcap 1.1.0.0 allows local users to gain privileges via a crafted 0x00090028 IOCTL call, which triggers a NULL pointer dereference.
Usbpcap Project Usbpcap 1.1.0.0
1 EDB exploit
6.5
CVSSv3
CVE-2014-1889
The Group creation process in the Buddypress plugin prior to 1.9.2 for WordPress allows remote authenticated users to gain control of arbitrary groups by leveraging a missing permissions check.
Buddypress Buddypress
1 EDB exploit
NA
CVE-2011-0727
GNOME Display Manager (gdm) 2.x prior to 2.32.1 allows local users to change the ownership of arbitrary files via a symlink attack on a (1) dmrc or (2) face icon file under /var/cache/gdm/.
Gnome Gdm 2.5
Gnome Gdm 2.2
Gnome Gdm 2.30
Gnome Gdm 2.25
Gnome Gdm 2.19
Gnome Gdm 2.22
Gnome Gdm 2.16
Gnome Gdm 2.13
Gnome Gdm 2.15
Gnome Gdm 2.4
Gnome Gdm 2.21
Gnome Gdm 2.27
Gnome Gdm 2.3
Gnome Gdm 2.23
Gnome Gdm 2.20
Gnome Gdm 2.6
Gnome Gdm 2.8
Gnome Gdm 2.26
Gnome Gdm 2.31
Gnome Gdm 2.28
Gnome Gdm 2.18
Gnome Gdm 2.14
7.8
CVSSv3
CVE-2018-18856
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client up to and including 1.37 for macOS. An attacker can communicate with an unprotected XPC service and directly execute arbitrary OS commands as root or load a potentially malicious kern...
Liquidvpn Liquidvpn
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusion
IMAP
CVE-2024-36103
CVE-2024-28995
CVE-2024-37325
CVE-2024-30078
CVE-2024-30082
SQL injection
CVE-2024-30052
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
3
4
5
6
7
8
9
10
NEXT »