Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2020-37021

Bandwidth Monitor 3.9 - 'Svc10StrikeBandMontitor' Unquoted Service Path

10-Strike Bandwidth Monitor 3.9 contains an unquoted service path vulnerability in multiple services that allows local attackers to escalate privileges. Attackers can place a malicious executable in specific file path locations to achieve privilege escalation to SYSTEM during service startup.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
10-strike Nsasoft
Products
Bandwidth Monitor Network Bandwidth Monitor
CVE-2020-37043

10-Strike Bandwidth Monitor 3.9 - Buffer Overflow

10-Strike Bandwidth Monitor 3.9 contains a buffer overflow vulnerability that allows attackers to bypass SafeSEH, ASLR, and DEP protections through carefully crafted input. Attackers can exploit the vulnerability by sending a malicious payload to the application's registration key input, enabling remote code execution and launching arbitrary system commands.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
10-strike Nsasoft
Products
Bandwidth Monitor Network Bandwidth Monitor