Sign in Free assessment

chitora records

4 published records for vendor chitora.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

17

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-426 Untrusted Search Path4

The weakness classes this vendor ships most often: where to look.

Attack profile

Local privilege escalation 4

All records

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2017-2246No exploit	Untrusted search path vulnerability in Installer of Lhaz version 2.4.0 and earlier allows an attacker to gain privileges via a Trojan horse chitora · lhaz · CWE-426 Local privilege escalation	High7.8	—	1.1%	Jul 17, 2017
31Monitor	CVE-2017-2247No exploit	Untrusted search path vulnerability in Self-extracting archive files created by Lhaz version 2.4.0 and earlier allows an attacker to gain prchitora · lhaz · CWE-426 Local privilege escalation	High7.8	—	1.1%	Jul 17, 2017
31Monitor	CVE-2017-2248No exploit	Untrusted search path vulnerability in Installer of Lhaz+ version 3.4.0 and earlier allows an attacker to gain privileges via a Trojan horsechitora · lhaz\+ · CWE-426 Local privilege escalation	High7.8	—	1.1%	Jul 17, 2017
31Monitor	CVE-2017-2249No exploit	Untrusted search path vulnerability in Self-extracting archive files created by Lhaz+ version 3.4.0 and earlier allows an attacker to gain pchitora · lhaz\+ · CWE-426 Local privilege escalation	High7.8	—	1.1%	Jul 17, 2017

CVE-2017-2246
31Monitor
Untrusted search path vulnerability in Installer of Lhaz version 2.4.0 and earlier allows an attacker to gain privileges via a Trojan horse
HighCVSS 7.8No exploitEPSS 1%
- Local privilege escalation
chitora · lhazJul 17, 2017
CVE-2017-2247
31Monitor
Untrusted search path vulnerability in Self-extracting archive files created by Lhaz version 2.4.0 and earlier allows an attacker to gain pr
HighCVSS 7.8No exploitEPSS 1%
- Local privilege escalation
chitora · lhazJul 17, 2017
CVE-2017-2248
31Monitor
Untrusted search path vulnerability in Installer of Lhaz+ version 3.4.0 and earlier allows an attacker to gain privileges via a Trojan horse
HighCVSS 7.8No exploitEPSS 1%
- Local privilege escalation
chitora · lhaz\+Jul 17, 2017
CVE-2017-2249
31Monitor
Untrusted search path vulnerability in Self-extracting archive files created by Lhaz+ version 3.4.0 and earlier allows an attacker to gain p
HighCVSS 7.8No exploitEPSS 1%
- Local privilege escalation
chitora · lhaz\+Jul 17, 2017