vxsearch vulnerabilities

Products

• vx search 4

Latest vxsearch CVEs

Newest publication first

1. CVE-2018-25328 VX Search 10.6.18 Local Buffer Overflow via Directory Field

   Published 2026-05-17

   High·CVSS 8.6 EPSS 0.15%

   VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying an oversized string in the directory field. Attackers can craft a malicious input file containing 271 bytes of junk data followed by a return a...

2. CVE-2021-47974 VX Search 13.5.28 Unquoted Service Path Privilege Escalation

   Published 2026-05-16

   High·CVSS 8.5 EPSS 0.12%

   VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to escalate privileges. Attackers can place malicious executables in unquoted path directories like C:\Program Files\VX Search...

3. CVE-2023-24671 VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which allows attackers to execute arbitrary commands at elevated privileges via a crafted executable file.

   Published 2023-03-16

   High·CVSS 7.8 EPSS 0.38%

   VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which allows attackers to execute arbitrary commands at elevated privileges via a crafted executable file.

4. CVE-2017-13708 Buffer overflow in the web server service in VX Search Enterprise 10.0.14 allows remote attackers to execute arbitrary code via a crafted GET request.

   Published 2017-08-31

   Critical·CVSS 9.8 EPSS 11.7% Framework module

   Buffer overflow in the web server service in VX Search Enterprise 10.0.14 allows remote attackers to execute arbitrary code via a crafted GET request.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.