Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 09:35:18 +0000 bdu:2022-03722 https://cve.radiocsirt.org/vuln/bdu:2022-03722 bdu:2022-03722 https://cve.radiocsirt.org/vuln/bdu:2022-03722 EUVD-2026-17711 https://cve.radiocsirt.org/vuln/euvd-2026-17711 EUVD-2026-17711 https://cve.radiocsirt.org/vuln/euvd-2026-17711 fkie_cve-2022-34006 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34006 <p>An issue was discovered in TitanFTP (aka Titan FTP) NextGen before 1.2.1050. When installing, Microsoft SQL Express 2019 installs by default with an SQL instance running as SYSTEM with BUILTIN\Users as sysadmin, thus enabling unprivileged Windows users to execute commands locally as NT AUTHORITY\SYSTEM, aka NX-I674 (sub-issue 2). NOTE: as of 2022-06-21, the 1.2.1050 release corrects this vulnerability in a new installation, but not in an upgrade installation.</p> <p>An issue was discovered in TitanFTP (aka Titan FTP) NextGen before 1.2.1050. When installing, Microsoft SQL Express 2019 installs by default with an SQL instance running as SYSTEM with BUILTIN\Users as sysadmin, thus enabling unprivileged Windows users to execute commands locally as NT AUTHORITY\SYSTEM, aka NX-I674 (sub-issue 2). NOTE: as of 2022-06-21, the 1.2.1050 release corrects this vulnerability in a new installation, but not in an upgrade installation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-34006 GHSA-mh32-c64f-h777 https://cve.radiocsirt.org/vuln/ghsa-mh32-c64f-h777 <p>An issue was discovered in TitanFTP (aka Titan FTP) NextGen before 1.2.1050. When installing, Microsoft SQL Express 2019 installs by default with an SQL instance running as SYSTEM with BUILTIN\Users as sysadmin, thus enabling unprivileged Windows users to execute commands locally as NT AUTHORITY\SYSTEM, aka NX-I674 (sub-issue 2).</p> <p>An issue was discovered in TitanFTP (aka Titan FTP) NextGen before 1.2.1050. When installing, Microsoft SQL Express 2019 installs by default with an SQL instance running as SYSTEM with BUILTIN\Users as sysadmin, thus enabling unprivileged Windows users to execute commands locally as NT AUTHORITY\SYSTEM, aka NX-I674 (sub-issue 2).</p> https://cve.radiocsirt.org/vuln/ghsa-mh32-c64f-h777 gsd-2022-34006 https://cve.radiocsirt.org/vuln/gsd-2022-34006 gsd-2022-34006 https://cve.radiocsirt.org/vuln/gsd-2022-34006