Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2023-36853

Keysight Geolocation Server Exposed Dangerous Method or Function

​In Keysight Geolocation Server v2.4.2 and prior, a low privileged attacker could create a local ZIP file containing a malicious script in any location. The attacker could abuse this to load a DLL with SYSTEM privileges.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Keysight
Products
Geolocation Server
CVE-2023-34394

Keysight N6845A Relative Path Traversal

In Keysight Geolocation Server v2.4.2 and prior, an attacker could upload a specially crafted malicious file or delete any file or directory with SYSTEM privileges due to an improper path validation, which could result in local privilege escalation or a denial-of-service condition.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Keysight
Products
Geolocation Server