Lucene search
+L

371 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 5:19 a.m.•12 views

CVE-2010-3375

qtparted has insecure library loading which may allow arbitrary code execution...

9.8CVSS7.5AI score0.02439EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/18 6:33 a.m.•64 views

CVE-2024-57964

The CVE-2024-57964 entry concerns the HVAC Energy Saving Program, where insecure loading of Dynamic Link Libraries is the root cause. The vulnerability can allow a local attacker to disclose information or execute arbitrary code on affected systems, with a CVSS v3.1 base score of 7.3 ( HIGH ) and...

7.3CVSS7AI score0.00176EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/19 2:15 a.m.•12 views

CVE-2022-27595

An insecure library loading vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local attackers who have gained user access to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QVPN Windo...

7.8CVSS5.9AI score0.0018EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/19 1:39 a.m.•37 views

CVE-2022-27595 QVPN Device Client

An insecure library loading vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local attackers who have gained user access to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QVPN Windo...

7.8CVSS0.0018EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/19 12:00 a.m.•18 views

QVPN Device Client 代码问题漏洞

QNAP Systems QVPN Device Client is a client software from China Weilian Technology QNAP Systems that is used to manage connections to VPN servers running on QNAP devices. A code issue vulnerability exists in QVPN Device Client that stems from an insecure library loading vulnerability that allows ...

7.8CVSS6.9AI score0.0018EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/19 12:00 a.m.•1 views

CVE-2022-27595: Uncontrolled Search Path Element

An insecure library loading vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local attackers who have gained user access to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QVPN Windo...

7.8CVSS6AI score0.0018EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/10/21 12:00 a.m.•26 views

Adobe Digital Editions < 4.5.5 Multiple Vulnerabilities (APSB17-20) (macOS)

The version of Adobe Digital Editions installed on the remote macOS host is prior to 4.5.5. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB17-20 advisory. - Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The...

10CVSS8.9AI score0.08496EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2024/10/21 12:00 a.m.•25 views

Adobe Digital Editions < 4.5.5 Multiple Vulnerabilities (APSB17-20)

The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.5.5. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB17-20 advisory. - Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The...

10CVSS9.3AI score0.08496EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2024/10/21 12:00 a.m.•27 views

Adobe Illustrator < 24.0 Multiple Vulnerabilities (APSB19-36)

The version of Adobe Illustrator installed on the remote Windows host is prior to 24.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB19-36 advisory. - Adobe Illustrator CC versions 23.1 and earlier have a memory corruption vulnerability. Successful exploitation...

10CVSS9.5AI score0.03985EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2024/10/21 12:00 a.m.•20 views

Adobe Animate 20.x < 20.0.0 A Vulnerability (APSB19-34)

The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 20.0.0. It is, therefore, affected by a vulnerability as referenced in the apsb19-34 advisory. - Adobe Animate CC versions 19.2.1 and earlier have an insecure library loading dll hijacking vulnerability...

7.8CVSS7.5AI score0.00777EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/10/21 12:00 a.m.•26 views

Adobe After Effects < 16.1.2 (APSB19-31)

The version of Adobe After Effects installed on the remote Windows host is prior to 16.1.2. It is, therefore, affected by a vulnerability as referenced in the APSB19-31 advisory. - Adobe After Effects versions 16 and earlier have an insecure library loading dll hijacking vulnerability. Successful...

7.8CVSS7.9AI score0.03205EPSS
SaveExploits0References2
OSV
OSV
•added 2024/06/06 6:15 p.m.•15 views

CVE-2024-5509

Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target mus...

7.8CVSS7.6AI score0.00528EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/02/29 12:00 a.m.•14 views

Delta Electronics CNCSoft Code Issue Vulnerability

Delta Electronics CNCSoft is a CNC machine simulation system software from Delta Electronics, Taiwan, China. The software provides high-performance motion control, rich human-machine interface functions, user-friendly operation, high stability to meet the needs of high-speed cutting, and good...

7.8CVSS6.9AI score0.0039EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/11/14 12:00 a.m.•15 views

PT-2023-7085 · Ashlar Vellum · Ashlar-Vellum Argon

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Argon affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Argon. User interaction is required, as the target must visit a malicious...

8.8CVSS7.8AI score0.00825EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2023/07/31 12:00 a.m.•16 views

PT-2023-3970 · Unknown · Qvpn Device Client

Name of the Vulnerable Software and Affected Versions: QVPN Device Client versions prior to 2.0.0.1310 QVPN Device Client versions prior to 2.0.0.1316 Description: The issue is related to an insecure library loading vulnerability. If exploited, it could allow local attackers who have gained user...

7.8CVSS7.4AI score0.0018EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
•added 2023/02/15 5:57 a.m.•13 views

SUSE CVE-2010-3375

qtparted has insecure library loading which may allow arbitrary code execution...

9.8CVSS8.1AI score0.02439EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2021/11/03 7:05 p.m.•32 views

CVE-2021-38416 Delta Electronics DIALink

Delta Electronics DIALink versions 1.2.4.0 and prior insecurely loads libraries, which may allow an attacker to use DLL hijacking and takeover the system where the software is installed...

7.8CVSS7.8AI score0.00262EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/10/21 12:00 a.m.•14 views

Delta Electronics DiaLink 代码问题漏洞

DIALink is an equipment networking platform from Delta Electronics that effectively manages CNC machines and PLC-controlled machines, collects on-site equipment data and connects it to the upper management platform through a unified interface, and at the same time provides visual information...

7.8CVSS5.6AI score0.00262EPSS
SaveExploits0References5
OSV
OSV
•added 2020/10/16 11:15 p.m.•9 views

CVE-2020-16902

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then...

7.8CVSS6AI score0.00941EPSS
SaveExploits0References1
Prion
Prion
•added 2020/10/16 11:15 p.m.•32 views

Privilege escalation

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then...

7.2CVSS8.4AI score0.00941EPSS
SaveExploits0References1Affected Software5
Rows per page
Query Builder