Sign in Free assessment

sisoftware records

3 published records for vendor sisoftware.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

Local privilege escalation 3

All records

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2024-34332No exploit	An issue in SiSoftware SANDRA v31.66 (SANDRA.sys 15.18.1.1) and before allows an attacker to escalate privileges via a crafted buffer sent tCWE-269 Local privilege escalation	High7.8	—	0.2%	Jun 10, 2024
27Monitor	CVE-2010-1592No exploit	sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in SiSoftware Sandra 16.10.2010.1 and earlier allows local users to gain privilsisoftware · sandra · CWE-20 Local privilege escalation	Medium6.9	—	0.4%	Apr 28, 2010
27Monitor	CVE-2010-5244No exploit	Untrusted search path vulnerability in SiSoftware Sandra 2010 Lite 2010.7.16.52 allows local users to gain privileges via a Trojan horse dwmsisoftware · sandra 2012 Local privilege escalation	Medium6.9	—	0.4%	Sep 7, 2012

CVE-2024-34332
31Monitor
An issue in SiSoftware SANDRA v31.66 (SANDRA.sys 15.18.1.1) and before allows an attacker to escalate privileges via a crafted buffer sent t
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
Jun 10, 2024
CVE-2010-1592
27Monitor
sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in SiSoftware Sandra 16.10.2010.1 and earlier allows local users to gain privil
MediumCVSS 6.9No exploitEPSS 0%
- Local privilege escalation
sisoftware · sandraApr 28, 2010
CVE-2010-5244
27Monitor
Untrusted search path vulnerability in SiSoftware Sandra 2010 Lite 2010.7.16.52 allows local users to gain privileges via a Trojan horse dwm
MediumCVSS 6.9No exploitEPSS 0%
- Local privilege escalation
sisoftware · sandra 2012Sep 7, 2012