Skip to content
Noroxi

SparkLabs records

3 published records for vendor SparkLabs. 0 of them have been exploited in the wild (listed in CISA KEV) and 1 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 33.3%
Pre-auth RCE
1
With a fix record
33.3%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 20
  2. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

3 records
  • CVE-2012-4284
    60This week

    A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the setuid-set ViscosityHe

    CriticalCVSS 9.8WeaponizedEPSS 69%

    sparklabs · viscosityJan 10, 2020

  • CVE-2017-20123
    31Monitor

    Viscosity DLL untrusted search path

    HighCVSS 7.8No exploitEPSS 1%

    sparklabs · viscosityJun 30, 2022

  • CVE-2020-5180
    31Monitor

    Viscosity 1.8.2 on Windows and macOS allows an unprivileged user to set a subset of OpenVPN parameters, which can be used to load a maliciou

    HighCVSS 7.8No exploitEPSS 0%

    sparklabs · viscosityJan 14, 2020