Pentraze

Latest CVEs · RSS

• CVE-2026-4556 2026-09-28 · CVSS 7.8
  Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which communicates with the application via XPC.
• CVE-2025-4960 2026-02-19 · CVSS 7.8
  The com.epson.InstallNavi.helper tool, deployed with the EPSON printer driver installer, contains a local privilege escalation vulnerability due to multiple fla
• CVE-2024-1244 2025-06-11 · CVSS 9.5
  Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control over the OSSEC server or in possession o
• CVE-2024-1243 2025-06-11 · CVSS 9.5
  Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure
• CVE-2024-9062 2025-06-10 · CVSS 7.8
  The Archify application contains a local privilege escalation vulnerability due to insufficient client validation in its privileged helper tool, com.oct4pie.arc
• CVE-2025-1055 2025-06-10 · CVSS 5.6
  A vulnerability in the K7RKScan.sys driver, part of the K7 Security Anti-Malware suite, allows a local low-privilege user to send crafted IOCTL requests to term
• CVE-2024-8270 2025-06-10 · CVSS 5.5
  The macOS Rocket.Chat application is affected by a vulnerability that allows bypassing Transparency, Consent, and Control (TCC) policies, enabling the exploita
• CVE-2024-7457 2025-06-10 · CVSS 7.8
  The ws.stash.app.mac.daemon.helper tool contains a vulnerability caused by an incorrect use of macOS’s authorization model. Instead of validating the client's a
• CVE-2024-8272 2024-11-25 · CVSS 7.8
  The com.uaudio.bsd.helper service, responsible for handling privileged operations, fails to implement critical client validation during XPC inter-process commun
• CVE-2024-7915 2024-11-25 · CVSS 7.8
  The application Sensei Mac Cleaner contains a local privilege escalation vulnerability, allowing an attacker to perform multiple operations as the root user. Th
• CVE-2024-7062 2024-07-26 · CVSS 8.8
  Nimble Commander suffers from a privilege escalation vulnerability due to the server (info.filesmanager.Files.PrivilegedIOHelperV2) performing improper/insuffic
• CVE-2024-0916 2024-04-25 · CVSS 10.0
  Unauthenticated file upload allows remote code execution. This issue affects UvDesk Community: from 1.0.0 through 1.1.3.
• CVE-2024-3120 2024-04-09 · CVSS 9.0
  A stack-buffer overflow vulnerability exists in all versions of sngrep since v1.4.1. The flaw is due to inadequate bounds checking when copying 'Content-Length'
• CVE-2024-3119 2024-04-09 · CVSS 9.0
  A buffer overflow vulnerability exists in all versions of sngrep since v0.4.2, due to improper handling of 'Call-ID' and 'X-Call-ID' SIP headers. The functions