Search Results (6 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-37142 1 10-strike 1 Network Inventory Explorer 2026-02-06 8.4 High
10-Strike Network Inventory Explorer 8.54 contains a structured exception handler buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting SEH records. Attackers can craft a malicious payload targeting the 'Computer' parameter during the 'Add' function to trigger remote code execution.
CVE-2020-37138 1 10-strike 1 Network Inventory Explorer 2026-02-06 9.8 Critical
10-Strike Network Inventory Explorer 9.03 contains a buffer overflow vulnerability in the file import functionality that allows remote attackers to execute arbitrary code. Attackers can craft a malicious text file with carefully constructed payload to trigger a stack-based buffer overflow and bypass data execution prevention through a ROP chain.
CVE-2021-47767 1 10-strike 1 Network Inventory Explorer 2026-01-30 7.8 High
10-Strike Network Inventory Explorer Pro 9.31 contains an unquoted service path vulnerability in the srvInventoryWebServer service running with LocalSystem privileges. Attackers can exploit the unquoted path by placing malicious executables in potential path segments to achieve privilege escalation and execute code with system-level permissions.
CVE-2020-36961 1 10-strike 1 Network Inventory Explorer 2026-01-29 9.8 Critical
10-Strike Network Inventory Explorer 8.65 contains a buffer overflow vulnerability in exception handling that allows remote attackers to execute arbitrary code. Attackers can craft a malicious file with 209 bytes of padding and a specially constructed Structured Exception Handler to trigger code execution.
CVE-2021-47772 1 10-strike 1 Network Inventory Explorer 2026-01-23 9.8 Critical
10-Strike Network Inventory Explorer Pro 9.31 contains a buffer overflow vulnerability in the text file import functionality that allows remote code execution. Attackers can craft a malicious text file with carefully constructed payload to trigger a reverse shell and execute arbitrary code on the target system.
CVE-2022-38573 1 10-strike 1 Network Inventory Explorer 2025-05-27 9.8 Critical
10-Strike Network Inventory Explorer v9.3 was discovered to contain a buffer overflow via the Add Computers function.