Streamline NX Client Multiple Vulnerabilities (2024-000006, 2024-000007)

The version of Streamline NX Client installed on the remote host is prior to 3.2.1.19, 3.3.1.3, 3.3.2.201, 3.4.3.1, 3.5.1.201, 3.6.100.53, or 3.6.2.1. It is, therefore, affected by multiple vulnerabilities as referenced in the 2024-000006 and 2024-000007 advisories. - Use of potentially dangerous...

Streamline NX Client < 3.4.3.2 / 3.5.x < 3.5.1.202 / 3.6.x < 3.6.2.2 RCE (2024-000004)

The version of Streamline NX Client installed on the remote host is prior to 3.231.0, 3.4.3.2, 3.5.1.202 or 3.6.2.2. It is, therefore, affected by a vulnerability as referenced in the 2024-000004 advisory. - Improper restriction of communication channel to intended endpoints issue exists in Ricoh...

CVE-2024-37124

Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, an attacker may create an arbitrary file in the PC where the product is installed...

CVE-2024-37387

Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, files in the PC where the product is installed may be altered...

CVE-2024-37387

Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, files in the PC where the product is installed may be altered...

CVE-2024-37387

Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, files in the PC where the product is installed may be altered...

CVE-2024-36252

Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is installed...

PT-2024-27320

Name of the Vulnerable Software and Affected Versions Ricoh Streamline NX PC Client affected versions not specified Description The issue is related to the use of a potentially dangerous function in the software. If exploited, an attacker may be able to create an arbitrary file on the PC where th...

CVE-2024-37387: Use of Potentially Dangerous Function

Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, files in the PC where the product is installed may be altered...

CVE-2024-37124: Improper Control of Generation of Code

Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, an attacker may create an arbitrary file in the PC where the product is installed...

CVE-2024-36480: Use of Hard-coded Credentials

Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier. If this vulnerability is exploited, an attacker may obtain LocalSystem Account of the PC where the product is installed. As a result, unintended operations may be performed on the PC...

CVE-2024-36252: Improper Restriction of Communication Channel to Intended Endpoints

Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is installed...

JVN#00442488: Multiple vulnerabilities in Ricoh Streamline NX PC Client

Ricoh Streamline NX PC Client provided by RICOH COMPANY, LTD. contains multiple vulnerabilities listed below. Improper restriction of communication channel to intended endpoints CWE-923 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Base Score 6.3 CVE-2024-36252 ricoh-2024-000004 Use of hard-coded...

PT-2024-4467 · Ricoh · Ricoh Streamline Nx Pc Client

Name of the Vulnerable Software and Affected Versions: Ricoh Streamline NX PC Client versions 3.6.x and earlier Description: The issue is related to an improper restriction of communication channel to intended endpoints, which may allow arbitrary code execution on the PC where the product is...

Buffer overflow

Qihoo 360 https://www.360.cn/ Qihoo 360 Safeguard https://www.360.cn/ Qihoo 360 Total Security http://www.360totalsecurity.com/ is affected by: Buffer Overflow. The impact is: execute arbitrary code local. The component is: This is a set of vulnerabilities affecting popular software, "360...

XSS Vulnerability in Hutchinson Cloud PC Client

HeCaiYun is China Mobile's personal online disk, providing personal cloud storage services for all users. There is an XSS vulnerability in the PC client of HeCaiYun, which can be exploited by attackers to obtain user cookie information...

Tiger Tooth Live PC client suffers from dll hijacking vulnerability (CNVD-2021-03449)

Tiger Live is a live content streaming software dedicated to a variety of entertainment, gaming, handheld games, and third-party push streams. Tiger Tooth Live PC client has a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

Tiger Tooth Live PC client suffers from dll hijacking vulnerability

Tiger Tooth Live PC Client is a game live streaming tool. The Tiger Tooth Live PC Client suffers from a dll hijacking vulnerability that stems from incorrect handling of runtime directory paths. An attacker can exploit this vulnerability by placing a malicious DLL file in a specific location on t...

DLL Hijacking Vulnerability in Lovecraft PC Client (CNVD-2021-01845)

Aiki is a PC client software that focuses on video playback. A DLL hijacking vulnerability exists in AikiYi PC client. An attacker can exploit this vulnerability to execute malicious code...

Command Execution Vulnerability in Little Yellow Stripe PC Client Software

Little Yellow Stripes is a cross-platform todolist that supports Windows, Android, and IOS, and the Windows client supports embedded desktop. Little Yellow Stripes pc client software has a command execution vulnerability that can be exploited by an attacker to gain control of the server...