Lucene search
+L

555 matches found

NVD
NVD
added 2022/11/17 11:15 p.m.31 views

CVE-2022-28766

Windows 32-bit versions of the Zoom Client for Meetings before 5.12.6 and Zoom Rooms for Conference Room before version 5.12.6 are susceptible to a DLL injection vulnerability. A local low-privileged user could exploit this vulnerability to run arbitrary code in the context of the Zoom client...

7.3CVSS0.00512EPSS
SaveExploits0References1
Prion
Prion
added 2022/11/17 11:15 p.m.22 views

Design/Logic Flaw

Windows 32-bit versions of the Zoom Client for Meetings before 5.12.6 and Zoom Rooms for Conference Room before version 5.12.6 are susceptible to a DLL injection vulnerability. A local low-privileged user could exploit this vulnerability to run arbitrary code in the context of the Zoom client...

4.1CVSS7.2AI score0.00512EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2022/11/17 10:36 p.m.10 views

CVE-2022-28766 DLL injection in Zoom Windows Clients

Windows 32-bit versions of the Zoom Client for Meetings before 5.12.6 and Zoom Rooms for Conference Room before version 5.12.6 are susceptible to a DLL injection vulnerability. A local low-privileged user could exploit this vulnerability to run arbitrary code in the context of the Zoom client...

3.3CVSS7.3AI score0.00512EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/11/17 10:36 p.m.42 views

CVE-2022-28766 DLL injection in Zoom Windows Clients

Windows 32-bit versions of the Zoom Client for Meetings before 5.12.6 and Zoom Rooms for Conference Room before version 5.12.6 are susceptible to a DLL injection vulnerability. A local low-privileged user could exploit this vulnerability to run arbitrary code in the context of the Zoom client...

3.3CVSS7.5AI score0.00512EPSS
SaveExploits0References1
CVE
CVE
added 2022/11/17 10:36 p.m.157 views

CVE-2022-28766

CVE-2022-28766 affects Windows 32‑bit builds of Zoom Client for Meetings and Zoom Rooms for Conference Room prior to 5.12.6. The issue is a DLL injection vulnerability that could allow a local, low‑privilege user to execute arbitrary code in the Zoom client process. Affected products: Zoom Client...

7.3CVSS5.8AI score0.00512EPSS
SaveExploits0References1Affected Software2
OpenVAS
OpenVAS
added 2022/11/16 12:0 a.m.32 views

Zoom Client < 5.12.6 DLL Injection Vulnerability (ZSB-22027)

The Zoom Client is prone to a DLL injection vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

7.3CVSS7.4AI score0.00512EPSS
SaveExploits0References1
NVD
NVD
added 2022/09/16 10:15 p.m.21 views

CVE-2022-2333

If an attacker manages to trick a valid user into loading a malicious DLL, the attacker may be able to achieve code execution in Honeywell SoftMaster version 4.51 application’s context and permissions...

8.8CVSS0.01057EPSS
SaveExploits0References2
CVE
CVE
added 2022/09/16 8:18 p.m.64 views

CVE-2022-2333

CVE-2022-2333 affects Honeywell SoftMaster 4.51. The vulnerability, Uncontrolled Search Path Element, allows code execution when a user is tricked into loading a malicious DLL, executing in the application’s context and permissions. Affected product: SoftMaster desktop application 4.51. Public de...

8.8CVSS8AI score0.01057EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/08/17 9:15 p.m.30 views

Input validation

The application searches for a library dll that is not found. If an attacker can place a dll with this name, then the attacker can leverage it to execute arbitrary code on the targeted Softing Secure Integration Server V1.22...

5.8CVSS7.3AI score0.09883EPSS
SaveExploits3References2Affected Software6
OpenVAS
OpenVAS
added 2022/06/16 12:0 a.m.24 views

Zoom Client < 5.10.3 DLL Injection Vulnerability (ZSB-22010) - Windows

The Zoom Client is prone to a DLL injection vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...

7.8CVSS7.8AI score0.01417EPSS
SaveExploits0References1
NVD
NVD
added 2022/06/15 9:15 p.m.25 views

CVE-2022-22788

The Zoom Opener installer is downloaded by a user from the Launch meeting page, when attempting to join a meeting without having the Zoom Meeting Client installed. The Zoom Opener installer for Zoom Client for Meetings before version 5.10.3 and Zoom Rooms for Conference Room for Windows before...

7.8CVSS0.01417EPSS
SaveExploits0References1
Prion
Prion
added 2022/06/15 9:15 p.m.21 views

Design/Logic Flaw

The Zoom Opener installer is downloaded by a user from the Launch meeting page, when attempting to join a meeting without having the Zoom Meeting Client installed. The Zoom Opener installer for Zoom Client for Meetings before version 5.10.3 and Zoom Rooms for Conference Room for Windows before...

6.9CVSS7.8AI score0.01417EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2022/06/15 8:12 p.m.175 views

CVE-2022-22788

CVE-2022-22788 affects Zoom Client for Meetings &lt;5.10.3 and Zoom Rooms for Windows

7.8CVSS7.5AI score0.01417EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2022/06/15 8:12 p.m.28 views

CVE-2022-22788 DLL injection in Zoom Opener installer for Zoom and Zoom Rooms clients

The Zoom Opener installer is downloaded by a user from the Launch meeting page, when attempting to join a meeting without having the Zoom Meeting Client installed. The Zoom Opener installer for Zoom Client for Meetings before version 5.10.3 and Zoom Rooms for Conference Room for Windows before...

7.1CVSS8AI score0.01417EPSS
SaveExploits0References1
NVD
NVD
added 2022/06/13 2:15 p.m.19 views

CVE-2022-24077

Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via malicious DLL injection...

7.8CVSS0.00292EPSS
SaveExploits0References1
Prion
Prion
added 2022/06/13 2:15 p.m.19 views

Design/Logic Flaw

Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via malicious DLL injection...

6.9CVSS8.1AI score0.00292EPSS
SaveExploits0References1
CVE
CVE
added 2022/06/13 1:40 p.m.75 views

CVE-2022-24077

CVE-2022-24077 affects Naver Cloud Explorer Beta. Vulnerability arises from malicious DLL injection enabling an attacker to execute arbitrary code with SYSTEM privileges. The description across sources confirms local-priority abuse with high impact (complete confidentiality, integrity, and availa...

7.8CVSS8AI score0.00292EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/06/13 1:40 p.m.26 views

CVE-2022-24077

Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via malicious DLL injection...

8.3AI score0.00292EPSS
SaveExploits0References1
OSV
OSV
added 2022/05/25 6:1 p.m.47 views

GO-2022-0220 DLL injection on Windows in runtime and syscall

Go on Windows misused certain LoadLibrary functionality, leading to DLL injection...

7.8CVSS7.8AI score0.03326EPSS
SaveExploits1References4
Metasploit
Metasploit
added 2022/05/25 5:43 p.m.824 views

Print Spooler Remote DLL Injection

The print spooler service can be abused by an authenticated remote attacker to load a DLL through a crafted DCERPC request, resulting in remote code execution as NT AUTHORITY\SYSTEM. This module uses the MS-RPRN vector which requires the Print Spooler service to be running. Module Options msf use...

9.3CVSS7.8AI score0.99759EPSS
SaveExploits75
Rows per page
Query Builder