106 matches found
CVE-2021-37452
NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files...
CVE-2021-37452
NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files...
CVE-2021-37452
NCH Quorum v2.03 and earlier allows local users to discover cleartext login information relating to users by reading the local .dat configuration files...
CVE-2021-37452
CVE-2021-37452 affects NCH Quorum (v2.03 and earlier). The issue is an information disclosure where local users can read plaintext login information by accessing the local .dat configuration files. Multiple sources (NVD, Red Hat, CNVD, CVE records) consistently describe the vulnerability as local...
NCH Quorum 访问控制错误漏洞
NCH Quorum is a teleconference server software. It can turn any computer into a conference call server. An information disclosure vulnerability exists in NCH Quorum, which stems from the fact that the product does not add valid permissions for access to the local .dat file, which could be exploit...
Jiajia DAT Video Format Converter is vulnerable to dll hijacking.
Jiajia DAT Video Format Converter is the software to convert DAT format. Jiajia DAT Video Format Converter has a dll hijacking vulnerability. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...
PT-2020-19769 · Dat · Dat.Gui
Name of the Vulnerable Software and Affected Versions: dat.gui versions prior to a fixed version Description: The issue is related to Regular Expression Denial of Service ReDoS via specifically crafted rgb and rgba values. This can be exploited in all versions of the package dat.gui...
Regular Expression Denial of Service (ReDoS)
Overview dat.gui is an A lightweight graphical user interface for changing variables in JavaScript. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via specially crafted rgb and rgba values. PoC js var gui = new dat.gui.GUI; var Options = function...
Trend Micro OfficeScan ServerMigrationTool DAT File Parsing Double Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro OfficeScan ServerMigrationTool. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...
McAfee VirusScan Enterprise < 8.8 Patch 15 Multiple Vulnerabilities (SB10302)
The version of McAfee VirusScan Enterprise VSE installed on the remote Windows host is prior to 8.8 Patch 15. It is, therefore, affected by multiple vulnerabilites: - Privilege Escalation vulnerability in Microsoft Windows client McTray.exe in McAfee VirusScan Enterprise VSE 8.8 prior to Patch 14...
CVE-2020-7280
Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise VSE prior to 8.8 Patch 15 allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links. This is timing...
CVE-2020-7280
Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise VSE prior to 8.8 Patch 15 allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links. This is timing...
CVE-2020-7280 Symbolic Link vulnerability during DAT update
Privilege Escalation vulnerability during daily DAT updates when using McAfee Virus Scan Enterprise VSE prior to 8.8 Patch 15 allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links. This is timing...
CVE-2019-14707
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. The firmware update process is insecure, leading to remote code execution. The attacker can provide arbitrary firmware in a .dat file via a webparam?system&action=set&upgrade URI...
auth (0.1.0), dat-network-protocol (>=0.1.3, <=0.1.4) +16 more potentially affected by CVE-2019-15544 via protobuf (>=1.0.24, <=1.7.4)
protobuf CARGO version =1.0.24, =0.1.3, =0.3.1, =0.3.1, =1.7.2, =0.3.1, =0.0.1, =0.1.0, =0.1.2, =0.1.4 and more Source cves: CVE-2019-15544 Source advisory: OSV:RUSTSEC-2019-0003...
Check Point ZoneAlarm 8.8.1.110 - Local Privilege Escalation Exploit
Exploit for windows platform in category local exploits Exploit Title: Check Point ZoneAlarm Local Privilege Escalation Exploit Author: Chris Anastasio Vendor Homepage: https://www.zonealarm.com/software/free-antivirus/ Software Link: Vulnerable Versions included in repo Version: ZoneAlarm Free...
(0Day) Wecon PIStudio cximageu Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Wecon PIStudio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...
DAT AUTOHUS - ContentProvider mode not defined, Dynamic Code Loading, Exported components vulnerabilities
HackApp vulnerability scanner discovered that application DAT AUTOHUS published at the 'play' market has multiple vulnerabilities...
Schneider Electric VAMPSET COMTRADE Records Buffer Overflow (CVE-2014-8390)
A heap buffer overflow vulnerability exists in Schneider Electric VAMPSET software. The vulnerability is due to improper processing of specific parameters within CFG and DAT files of a COMTRADE record. A remote, unauthenticated attacker can exploit this vulnerability by enticing the victim to ope...