19817 matches found
WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.3 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability leading to plugin settings change discovered by Muhammad Daffa Patchstack Alliance in WordPress Advanced Dynamic Pricing for WooCommerce plugin versions = 4.1.3 Solution Update the WordPress Advanced Dynamic Pricing for WooCommerce plugin to the lates...
CVE-2022-38633
Genymotion Desktop v3.2.1 was discovered to contain a DLL hijacking vulnerability which allows attackers to escalate privileges and execute arbitrary code via a crafted binary...
CVE-2022-34101
A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a user can place a malicious DLL in a certain path to execute code and preform a privilege escalation attack...
CVE-2022-39203
matrix-appservice-irc is an open source Node.js IRC bridge for Matrix. Attackers can specify a specific string of characters, which would confuse the bridge into combining an attacker-owned channel and an existing channel, allowing them to grant themselves permissions in the channel. The...
CVE-2022-39203 Parsing issue in matrix-org/node-irc leading to room takeovers
matrix-appservice-irc is an open source Node.js IRC bridge for Matrix. Attackers can specify a specific string of characters, which would confuse the bridge into combining an attacker-owned channel and an existing channel, allowing them to grant themselves permissions in the channel. The...
CVE-2022-39203 Parsing issue in matrix-org/node-irc leading to room takeovers
matrix-appservice-irc is an open source Node.js IRC bridge for Matrix. Attackers can specify a specific string of characters, which would confuse the bridge into combining an attacker-owned channel and an existing channel, allowing them to grant themselves permissions in the channel. The...
CVE-2022-39203 Parsing issue in matrix-org/node-irc leading to room takeovers
matrix-appservice-irc is an open source Node.js IRC bridge for Matrix. Attackers can specify a specific string of characters, which would confuse the bridge into combining an attacker-owned channel and an existing channel, allowing them to grant themselves permissions in the channel. The...
2022-09 Dynamic Cumulative Update for Windows 11 for x64-based Systems (KB5017328)
ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...
Moderate: Red Hat Security Advisory: python3 security update
An update for python3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Honeywell SoftMaster code-related vulnerabilities
Honeywell SoftMaster is a software program from Honeywell USA. Honeywell SoftMaster suffers from a code issue vulnerability that stems from the fact that if an attacker manages to trick a valid user into loading a malicious DLL, then the attacker can execute code within the context and privileges...
PT-2022-25431 · Crafter Cms · Crafter Studio
Name of the Vulnerable Software and Affected Versions: Crafter Studio of Crafter CMS affected versions not specified Description: The issue allows authenticated developers to execute OS commands via FreeMarker SSTI due to improper control of dynamically-managed code resources. Recommendations: At...
PT-2022-25035 · Samsung · Smart Switch Pc
Name of the Vulnerable Software and Affected Versions: Smart Switch PC versions prior to 4.3.22083 3 Description: The issue allows an attacker to execute arbitrary code through a DLL hijacking vulnerability. Recommendations: For versions prior to 4.3.22083 3, update to version 4.3.22083 3 or late...
HP Performance Tune-up Code Execution
The vulnerability of the HP Performance Tune-up performance optimization tool, a software solution for automated support and driver updates by HP Support Assistant, lies in the possibility of replacing the dynamic library. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Samsung Smart Switch PC code issue vulnerability
SAMSUNG Smart Switch PC is a Windows software from Samsung South Korea. It is used for data transfer. SAMSUNG Smart Switch PC suffers from a DLL hijacking vulnerability that originates when a process attempts to load a DLL without specifying the absolute path to the DLL. An attacker can exploit...
CVE-2022-36403
Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
NPM vm2 Code Execution
The vulnerability of the NPM packet manager’s vm2 library is related to insufficient control over resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2022-36271
Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...
GHSA-GWC9-M7RH-J2WW vulnerabilities
Vulnerabilities for packages: k3d, kubeflow, dynamic-localpv-provisioner, terraform-provider-sendgrid...
