Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Priority HIGH 72

VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying an oversized string in the directory field.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00148 Published 2026-05-17 No fix listed CWE-120
Priority HIGH 72

VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to escalate privileges.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00121 Published 2026-05-16 No fix listed CWE-428
Priority HIGH 69

VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which allows attackers to execute arbitrary commands at elevated privileges via a crafted executable file.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00378 Published 2023-03-16 No fix listed CWE-428