Lucene search
+L

4168 matches found

CNNVD
CNNVD
added 2021/05/06 12:00 a.m.12 views

Cisco AnyConnect Secure Mobility Client for Windows 代码问题漏洞

Cisco AnyConnect Secure Mobility Client for Windows is a Windows-based secure mobility client from Cisco that provides secure access to networks and applications from any device. A security vulnerability exists in Cisco AnyConnect Secure Mobility Client for Windows that could allow an...

7.8CVSS7.3AI score0.00249EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/05/06 12:00 a.m.17 views

Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability (CNVD-2021-37770)

The Cisco AnyConnect Secure Mobility Client is a virtual private network VPN client for a variety of operating systems and hardware configurations. DLL hijacking vulnerability in Cisco AnyConnect Secure Mobility Client for Windows. The vulnerability stems from the application loading executables...

7.8CVSS7.5AI score0.00527EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/05/06 12:00 a.m.11 views

Cisco AnyConnect Secure Mobility Client for Windows 代码问题漏洞

The Cisco AnyConnect Secure Mobility Client is a virtual private network VPN client for a variety of operating systems and hardware configurations. DLL hijacking vulnerability in Cisco AnyConnect Secure Mobility Client for Windows. The vulnerability stems from the application loading executables...

7.8CVSS6.2AI score0.00527EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/05/05 4:00 p.m.6 views

CVE-2021-1426

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execut...

7.8CVSS7.8AI score0.00249EPSS
SaveExploits0References2
Cisco
Cisco
added 2021/05/05 4:00 p.m.221 views

Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execut...

7CVSS7.5AI score0.00527EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2021/05/04 1:00 p.m.300 views

New Pingback Malware Using ICMP Tunneling to Evade C&C Detection

Researchers on Tuesday disclosed a novel malware that uses a variety of tricks to stay under the radar and evade detection, while stealthily capable of executing arbitrary commands on infected systems. Called 'Pingback,' the Windows malware leverages Internet Control Message Protocol ICMP tunneli...

1.1AI score
SaveExploits0
NVD
NVD
added 2021/04/22 9:15 p.m.43 views

CVE-2020-25244

A vulnerability has been identified in LOGO! Soft Comfort All versions V8.4. The software insecurely loads libraries which makes it vulnerable to DLL hijacking. Successful exploitation by a local attacker could lead to a takeover of the system where the software is installed...

8.4CVSS0.00248EPSS
SaveExploits0References1
Prion
Prion
added 2021/04/22 9:15 p.m.25 views

Code injection

A vulnerability has been identified in LOGO! Soft Comfort All versions V8.4. The software insecurely loads libraries which makes it vulnerable to DLL hijacking. Successful exploitation by a local attacker could lead to a takeover of the system where the software is installed...

7.2CVSS7.8AI score0.00248EPSS
SaveExploits0References1
CVE
CVE
added 2021/04/22 8:42 p.m.84 views

CVE-2020-25244

Siemens LOGO! Soft Comfort is affected by CVE-2020-25244. All versions before V8.4 are vulnerable to DLL hijacking due to insecure library loading, enabling a local attacker to take over the system where the software is installed. Public sources corroborate the issue and Siemens PT Security/Red H...

8.4CVSS7.8AI score0.00248EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/04/22 8:42 p.m.52 views

CVE-2020-25244

A vulnerability has been identified in LOGO! Soft Comfort All versions V8.4. The software insecurely loads libraries which makes it vulnerable to DLL hijacking. Successful exploitation by a local attacker could lead to a takeover of the system where the software is installed...

8.4CVSS7.9AI score0.00248EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/14 3:15 p.m.13 views

CVE-2021-28098

An issue was discovered in Forescout CounterACT before 8.1.4. A local privilege escalation vulnerability is present in the logging function. SecureConnector runs with administrative privileges and writes logs entries to a file in %PROGRAMDATA%\ForeScout SecureConnector\ that has full permissions...

7.8CVSS7.1AI score0.0041EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2021/04/14 3:15 p.m.5 views

CVE-2021-28098

An issue was discovered in Forescout CounterACT before 8.1.4. A local privilege escalation vulnerability is present in the logging function. SecureConnector runs with administrative privileges and writes logs entries to a file in %PROGRAMDATA%\ForeScout SecureConnector\ that has full permissions...

7.8CVSS7.3AI score0.0041EPSS
SaveExploits1References4
Prion
Prion
added 2021/04/14 3:15 p.m.20 views

Privilege escalation

An issue was discovered in Forescout CounterACT before 8.1.4. A local privilege escalation vulnerability is present in the logging function. SecureConnector runs with administrative privileges and writes logs entries to a file in %PROGRAMDATA%\ForeScout SecureConnector\ that has full permissions...

4.4CVSS7.7AI score0.0041EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2021/04/14 2:56 p.m.60 views

CVE-2021-28098

Forescout CounterACT

7.8CVSS7.6AI score0.0041EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2021/04/14 2:56 p.m.25 views

CVE-2021-28098

An issue was discovered in Forescout CounterACT before 8.1.4. A local privilege escalation vulnerability is present in the logging function. SecureConnector runs with administrative privileges and writes logs entries to a file in %PROGRAMDATA%\ForeScout SecureConnector\ that has full permissions...

7.9AI score0.0041EPSS
SaveExploits1References3
NVD
NVD
added 2021/04/13 1:15 p.m.26 views

CVE-2021-28647

Trend Micro Password Manager version 5 Consumer is vulnerable to a DLL Hijacking vulnerability which could allow an attacker to inject a malicious DLL file during the installation progress and could execute a malicious program each time a user installs a program...

7.8CVSS0.00469EPSS
SaveExploits0References1
Prion
Prion
added 2021/04/13 1:15 p.m.22 views

Design/Logic Flaw

Trend Micro Password Manager version 5 Consumer is vulnerable to a DLL Hijacking vulnerability which could allow an attacker to inject a malicious DLL file during the installation progress and could execute a malicious program each time a user installs a program...

4.4CVSS7.6AI score0.00469EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/04/13 1:15 p.m.15 views

CVE-2021-28647

Trend Micro Password Manager version 5 Consumer is vulnerable to a DLL Hijacking vulnerability which could allow an attacker to inject a malicious DLL file during the installation progress and could execute a malicious program each time a user installs a program...

7.8CVSS5.5AI score0.00469EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/04/13 12:55 p.m.49 views

CVE-2021-28647

CVE-2021-28647 affects Trend Micro Password Manager for Windows (Consumer) 5.x. The root cause is a DLL search path hijack during installer execution, allowing a malicious DLL to be loaded and potentially cause arbitrary execution of code each time a user installs a program. Public sources descri...

7.8CVSS7.6AI score0.00469EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/04/13 12:55 p.m.36 views

CVE-2021-28647

Trend Micro Password Manager version 5 Consumer is vulnerable to a DLL Hijacking vulnerability which could allow an attacker to inject a malicious DLL file during the installation progress and could execute a malicious program each time a user installs a program...

7.8AI score0.00469EPSS
SaveExploits0References1
Rows per page
Query Builder