Vxsearch Vx Search vulnerabilities

CVE-2017-13708 [CRITICAL] CWE-119 CVE-2017-13708: Buffer overflow in the web server service in VX Search Enterprise 10.0.14 allows remote attackers to Buffer overflow in the web server service in VX Search Enterprise 10.0.14 allows remote attackers to execute arbitrary code via a crafted GET request.

CVE-2021-47974 [HIGH] CWE-428 CVE-2021-47974: VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Se VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to escalate privileges. Attackers can place malicious executables in unquoted path directories like C:\Program Files\VX Search to execute arbitrary code with LocalSystem privileges when services resta

CVE-2023-24671 [HIGH] CWE-428 CVE-2023-24671: VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which all VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which allows attackers to execute arbitrary commands at elevated privileges via a crafted executable file.

CVE-2018-25328 [HIGH] CWE-120 CVE-2018-25328: VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying an oversized string in the directory field. Attackers can craft a malicious input file containing 271 bytes of junk data followed by a return address to execute arbitrary code with application privileges.