Lucene search
+L

1107 matches found

Positive Technologies
Positive Technologies
added 2020/08/17 12:0 a.m.4 views

PT-2020-20042 · Nextcloud +1 · Nextcloud Desktop Client +1

Name of the Vulnerable Software and Affected Versions: NextCloud Desktop Client version 2.6.4 Description: A memory corruption issue exists due to missing Address Space Layout Randomization ASLR and Data Execution Prevention DEP protections in the Windows version of the software, allowing memory...

7.8CVSS5.7AI score0.01401EPSS
SaveExploits3References14
NVD
NVD
added 2020/08/10 2:15 p.m.30 views

CVE-2020-8224

A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory...

7.8CVSS7.7AI score0.00662EPSS
SaveExploits1References3
NVD
NVD
added 2020/08/10 2:15 p.m.35 views

CVE-2020-8229

A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS against the host system...

5.5CVSS5.4AI score0.00466EPSS
SaveExploits1References2
OSV
OSV
added 2020/08/10 2:15 p.m.16 views

CVE-2020-8224

A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory...

7.8CVSS7.3AI score
SaveExploits0References3
OSV
OSV
added 2020/08/10 2:15 p.m.21 views

CVE-2020-8229

A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS against the host system...

5.5CVSS6.6AI score
SaveExploits0References2
Prion
Prion
added 2020/08/10 2:15 p.m.18 views

Code injection

A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory...

4.6CVSS7.7AI score0.00662EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2020/08/10 2:15 p.m.24 views

Memory corruption

A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS against the host system...

4.9CVSS5.3AI score0.00466EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2020/08/10 1:35 p.m.69 views

CVE-2020-8224

CVE-2020-8224 – Nextcloud Desktop Client (Windows) Root cause: The Nextcloud Desktop Client ships a Windows OpenSSL library (libeay32.dll) compiled without a defined openssldir. The library attempts to load c:\usr\local\ssl\openssl.cnf on startup. A low-privilege user can create the directory and...

7.8CVSS7.6AI score0.00662EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2020/08/10 1:35 p.m.45 views

CVE-2020-8224

A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory...

7.7AI score0.00662EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2020/08/10 1:35 p.m.73 views

CVE-2020-8224

A code injection in Nextcloud Desktop Client 2.6.4 allowed to load arbitrary code when placing a malicious OpenSSL config into a fixed directory...

7.8CVSS7.7AI score0.00662EPSS
SaveExploits1
CVE
CVE
added 2020/08/10 1:35 p.m.62 views

CVE-2020-8229

CVE-2020-8229 affects the Nextcloud Desktop Client 2.6.4 via a flaw in the OCUtil.dll that causes a memory leak , resulting in a possible DoS of the host system . The available connected documents corroborate the issue as a memory leak in the OCUtil.dll used by Nextcloud Desktop Client 2.6.4, wit...

5.5CVSS5.2AI score0.00466EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2020/08/10 1:35 p.m.41 views

CVE-2020-8229

A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS against the host system...

5.3AI score0.00466EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2020/08/10 1:35 p.m.63 views

CVE-2020-8229

A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS against the host system...

5.5CVSS5.3AI score0.00466EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2020/08/10 12:0 a.m.3 views

PT-2020-20041 · Nextcloud +1 · Nextcloud Desktop Client +1

Name of the Vulnerable Software and Affected Versions: Nextcloud Desktop Client version 2.6.4 Description: A memory leak in the OCUtil.dll library can lead to a Denial of Service DoS against the host system. Recommendations: For Nextcloud Desktop Client version 2.6.4, at the moment, there is no...

7.8CVSS5.3AI score0.01401EPSS
SaveExploits3References14
OSV
OSV
added 2020/08/04 1:15 p.m.3 views

CVE-2019-20001

An issue was discovered in RICOH Streamline NX Client Tool and RICOH Streamline NX PC Client that allows attackers to escalate local privileges...

7.8CVSS7.1AI score0.00314EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/23 12:0 a.m.8 views

The vulnerability of the Remote Desktop Client on Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.6CVSS7.7AI score0.08449EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2020/07/17 12:46 a.m.42 views

Security Bulletin: Curl vulnerabilities CVE-2019-5443 impacts IBM Aspera High-Speed Transfer Server, IBM Aspera High-Speed Transfer Client, IBM Aspera Desktop Client 3.9.1 and earlier

Summary Curl vulnerabilities CVE-2019-5443 impacts IBM Aspera High-Speed Transfer Server, IBM Aspera High-Speed Transfer Client, IBM Aspera Desktop Client 3.9.1 and earlier. The fix was delivered in version 3.9.3. Vulnerability Details CVEID: CVE-2019-5443 DESCRIPTION: A non-privileged user or...

7.8CVSS1.9AI score0.00717EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2020/07/17 12:0 a.m.5 views

Microsoft Remote Desktop Client Remote Code Execution Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in the Microsoft Remote Desktop Client, which...

7.5CVSS8.5AI score0.08449EPSS
SaveExploits0References1
OSV
OSV
added 2020/07/14 11:15 p.m.3 views

CVE-2020-1374

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'...

7.5CVSS6.4AI score0.08449EPSS
SaveExploits0References1
NVD
NVD
added 2020/07/14 11:15 p.m.15 views

CVE-2020-1374

A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote Desktop Client Remote Code Execution Vulnerability'...

7.5CVSS0.08449EPSS
SaveExploits0References1
Rows per page
Query Builder