Approved changes feed: RSS · Atom

cpe:2.3:a:vxsearch:vx_search:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVxsearch (cdbd1bde-b79a-548b-a562-f88f011545a3)
ProductVx Search (574610c6-6ed9-5c35-bbcd-9e6f7569cb13)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-47974 vulnerable 2026-06-08 05:38:08.016491 VX Search 13.5.28 Unquoted Service Path Privilege Escalation
HIGH (7.8)
VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to escalate privileges. Attackers can place malicious executables in unquoted path directories like C:\Program Files\VX Search to execute arbitrary code with LocalSystem privileges when services restart.
Published: 2026-05-16T15:26:14.479Z
Updated: 2026-05-18T13:58:18.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-25328 vulnerable 2026-06-08 05:11:29.797042 VX Search 10.6.18 Local Buffer Overflow via Directory Field
HIGH (8.4)
VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying an oversized string in the directory field. Attackers can craft a malicious input file containing 271 bytes of junk data followed by a return address to execute arbitrary code with application privileges.
Published: 2026-05-17T12:11:33.848Z
Updated: 2026-05-18T12:31:28.764Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.