Brave 安全漏洞

Brave is a fast, private and secure web browser from Brave USA. A security vulnerability exists in Brave Desktop versions 1.17 - 1.26.60 that could lead to information disclosure...

Rocket.Chat 安全漏洞

Rocket.Chat is an open source team chat software. A security vulnerability exists in the Rocket.Chat desktop application version 2.17.11, which originates from the ability to open external links without user interaction. No details of the vulnerability are available at this time...

CVE-2021-31509

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

PT-2021-19391 · Opentext · Opentext Brava! Desktop

Name of the Vulnerable Software and Affected Versions: OpenText Brava! Desktop version 16.6.3.84 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

OpenText Brava! Desktop untrusted pointer dereference vulnerability (NVD-C-2021-136269)

OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. An untrusted pointer dereference vulnerability exists in the parsing of SLDPRT files in OpenText Brava! Desktop. The vulnerability stems from failure to properly...

OpenText Brava! Desktop post-release reuse vulnerability (CNVD-2021-42338)

OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. A post-release reuse vulnerability exists in the parsing of DWG files in OpenText Brava! Desktop. The vulnerability stems from a failure to validate the existenc...

OpenText Brava! Desktop out-of-bounds write vulnerability (CNVD-2021-42329)

OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. An out-of-bounds write vulnerability exists in the parsing of DXF files in OpenText Brava! Desktop. The vulnerability stems from a lack of proper validation of...

CVE-2021-27278

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists withi...

Vulnerabilities fixed in Microsoft Windows

Microsoft fixes multiple vulnerabilities in Windows. A remote malicious person could potentially exploit them to execute arbitrary code, to obtain elevated privileges obtain elevated privileges, to access sensitive data or to perform a denial-of-service attack. Below is a summary of the various...

Yout Player suffers from a command execution vulnerability (CNVD-2020-47979)

Yout Player is the new way to watch YouTube playlists on your desktop. No YouTube ads, easy to use, no floating windows. Yout Player suffers from a command execution vulnerability that can be exploited by an attacker to gain server privileges...

Docker Desktop Elevation of Privilege Vulnerability

Docker Desktop is an application for MacOS and Windows computers for building and sharing containerized applications and microservices. An elevation of privilege vulnerability exists in com.docker.vmnetd in Docker Desktop 2.3.0.3. The vulnerability stems from a lack of client-side authentication...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-35690)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in versions prior to FreeRDP 2.1.2. The vulnerability stems from a networked system or product performing operations in memory without properly validating data...

Exploit for Use After Free in Microsoft

微软3389远程漏洞CVE-2019-0708批量检测工具 0x001 Win下检测 https://github.com/robertdavidgraham/rdpscan C:\Users\K8team\Desktop\rdpscan-master\vs10\Release 的目录 2019/06/02 02:11 DIR . 2019/06/02 02:11 DIR .. 2019/06/02 01:55 2,582,016 libcrypto-11.dll 2019/06/02 01:57 619,520 libssl-11.dll 2019/06/02 02:04 172,03...

FreeRDP suffers from a denial of service vulnerability (CNVD-2020-26301)

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. FreeRDP suffers from a denial of service vulnerability that can be exploited by an attacker to connect to a server with malformed data to launch a denial of service attack...

Design/Logic Flaw

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Ubuntu 18.04 LTS : gnome-desktop vulnerability (USN-3994-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3994-1 advisory. It was discovered that gnome-desktop incorrectly confined thumbnailers. If a user were tricked into downloading a malicious image file, a remote attacker could...

Telegram Desktop 1.3.14 denial of service Vulnerability

Exploit for linux platform in category dos / poc Telegram Desktop aka tdesktop 1.3.14 might allow attackers to cause a denial of service assertion failure and application exit via an "Edit color palette" search that triggers an "index out of range" condition. NOTE: this issue is disputed by...

UBUNTU-CVE-2017-5118

Blink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, failed to correctly propagate CSP restrictions to javascript scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page...

Symantec VIP Access for Desktop DLL Load Native Code Execution Vulnerability

Symantec VIP Access for Desktop is a suite of online account security protection software from Symantec Symantec. A security vulnerability exists in versions of Symantec VIP Access for Desktop prior to 2.2.4. An attacker could exploit the vulnerability to run an external executable file...

Yandex Browser for desktop security bypass vulnerability

Yandex Browser for desktop is a desktop version of the Russian company Yandex. A security vulnerability exists in versions of Yandex Browser for desktop prior to 17.1.1.227. An attacker can exploit the vulnerability to prevent protection warnings from appearing on malicious websites...