Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 01:59:45 +0000 cnvd-2019-44981 https://cve.radiocsirt.org/vuln/cnvd-2019-44981 cnvd-2019-44981 https://cve.radiocsirt.org/vuln/cnvd-2019-44981 EUVD-2026-59306 https://cve.radiocsirt.org/vuln/euvd-2026-59306 EUVD-2026-59306 https://cve.radiocsirt.org/vuln/euvd-2026-59306 fkie_cve-2019-19460 https://cve.radiocsirt.org/vuln/fkie_cve-2019-19460 <p>An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. The product&#39;s webserver runs as a Windows service with local SYSTEM permissions by default. This is against the principle of least privilege. An attacker who is able to exploit CVE-2019-19458 or CVE-2019-19459 is basically able to write to every single path on the file system, because the webserver is running with the highest privileges available.</p> <p>An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. The product&#39;s webserver runs as a Windows service with local SYSTEM permissions by default. This is against the principle of least privilege. An attacker who is able to exploit CVE-2019-19458 or CVE-2019-19459 is basically able to write to every single path on the file system, because the webserver is running with the highest privileges available.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-19460 GHSA-v5mw-2gc6-7h62 https://cve.radiocsirt.org/vuln/ghsa-v5mw-2gc6-7h62 <p>An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. The product&#39;s webserver runs as a Windows service with local SYSTEM permissions by default. This is against the principle of least privilege. An attacker who is able to exploit CVE-2019-19458 or CVE-2019-19459 is basically able to write to every single path on the file system, because the webserver is running with the highest privileges available.</p> <p>An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. The product&#39;s webserver runs as a Windows service with local SYSTEM permissions by default. This is against the principle of least privilege. An attacker who is able to exploit CVE-2019-19458 or CVE-2019-19459 is basically able to write to every single path on the file system, because the webserver is running with the highest privileges available.</p> https://cve.radiocsirt.org/vuln/ghsa-v5mw-2gc6-7h62 gsd-2019-19460 https://cve.radiocsirt.org/vuln/gsd-2019-19460 gsd-2019-19460 https://cve.radiocsirt.org/vuln/gsd-2019-19460