Search Results (4 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-47974 2 Vxsearch, Webberzone 2 Vx Search, Better Search 2026-05-18 7.8 High
VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to escalate privileges. Attackers can place malicious executables in unquoted path directories like C:\Program Files\VX Search to execute arbitrary code with LocalSystem privileges when services restart.
CVE-2018-25328 2 Vxsearch, Webberzone 2 Vx Search, Better Search 2026-05-18 8.4 High
VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying an oversized string in the directory field. Attackers can craft a malicious input file containing 271 bytes of junk data followed by a return address to execute arbitrary code with application privileges.
CVE-2017-13708 1 Vxsearch 1 Vx Search 2025-04-20 N/A
Buffer overflow in the web server service in VX Search Enterprise 10.0.14 allows remote attackers to execute arbitrary code via a crafted GET request.
CVE-2023-24671 2 Microsoft, Vxsearch 2 Windows, Vx Search 2025-02-26 7.8 High
VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which allows attackers to execute arbitrary commands at elevated privileges via a crafted executable file.