CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 14/10/2019 |
| CVE-2019-17043 | 高危7.8 | An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the best1collect.exe SUID binary could allow an attacker to elevate his/her privileges to the ones of the "patrol" user by specially crafting a shared library .so file that will be loaded during execution. | 14/10/2019 |
| CVE-2019-8352 | 严重9.8 | By default, BMC PATROL Agent through 11.3.01 uses a static encryption key for encrypting/decrypting user credentials sent over the network to managed PATROL Agent services. If an attacker were able to capture this network traffic, they could decrypt these credentials and use them to execute code or escalate privileges | 20/05/2019 |
| CVE-2018-20735 | 高危7.8 | An issue was discovered in BMC PATROL Agent through 11.3.01. It was found that the PatrolCli application can allow for lateral movement and escalation of privilege inside a Windows Active Directory environment. It was found that by default the PatrolCli / PATROL Agent application only verifies if the password provided | 17/01/2019 |
| CVE-2014-2591 | 中危6.9 | Untrusted search path vulnerability in BMC Patrol for AIX 3.9.00 allows local users to gain privileges via a crafted library, related to an incorrect RPATH setting. | 14/05/2014 |
| CVE-2008-5982 | 严重10.0 | Format string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute arbitrary code via format string specifiers in an invalid version number to TCP port 3181, which are not properly handled when writing a log message. | 27/01/2009 |
| CVE-1999-1460 | 高危7.2 | BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files as root by specifying the target file as the second argument to the snmpmagt program. | 13/07/1999 |
| CVE-1999-0801 | 严重10.0 | BMC Patrol allows remote attackers to gain access to an agent by spoofing frames. | 09/04/1999 |
| CVE-1999-0921 | 中危5.0 | BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service. | 01/04/1999 |
| CVE-1999-0443 | 严重10.0 | Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password. | 01/04/1999 |
| CVE-1999-1459 | 高危7.2 | BMC PATROL Agent before 3.2.07 allows local users to gain root privileges via a symlink attack on a temporary file. | 02/11/1998 |