Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2020-36879

Flexsense DiskBoss Service Unquoted Service Path Vulnerability

Flexsense DiskBoss 11.7.28 allows unauthenticated attackers to elevate their privileges using any of its services, enabling remote code execution during startup or reboot with escalated privileges. Attackers can exploit the unquoted service path vulnerability by specifying a malicious service name in the 'sc qc' command, allowing them to execute arbitrary system commands.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Flexense Flexsense
Products
Diskboss Diskboss
CVE-2020-36880

Flexsense DiskBoss 'Reports and Data Directory' Buffer Overflow

Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Reports and Data Directory' field that allows an attacker to execute arbitrary code on the system.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Flexense Flexsense
Products
Diskboss Diskboss
CVE-2020-36881

Flexsense DiskBoss 'Add Input Directory' Buffer Overflow

Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Input Directory' component that allows unauthenticated attackers to execute arbitrary code on the system. Attackers can exploit this by pasting a specially crafted directory path into the 'Add Input Directory' field.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Flexense Flexsense
Products
Diskboss Diskboss
CVE-2020-36882

Flexsense DiskBoss Application Crash Denial of Service

Flexsense DiskBoss 7.7.14 allows unauthenticated attackers to upload arbitrary files via /Command/Search Files/Directory field, leading to a denial of service by crashing the application.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Flexense Flexsense
Products
Diskboss Diskboss