CVE-2020-24741

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-0570. Reason: This candidate is a duplicate of CVE-2020-0570. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2020-0570 instead of this candidate. All references and descriptions in this...

Qt QLibrary 安全漏洞

Qt QLibrary is a code framework and QLibrary is one of his libraries. A security vulnerability exists in Qt QLibrary versions prior to 5.14.0, which stems from QPluginLoader attempting to load a plugin relative to the working directory...

PT-2021-11070 · Qt Company +1 · Qt +1

Name of the Vulnerable Software and Affected Versions: Qt versions 5.12.7 and 5.14.1 Description: An issue has been fixed where QLibrary attempts to load plugins relative to the working directory, allowing attackers to execute arbitrary code via crafted files. Recommendations: For Qt version...

Updated qtbase5 packages fix security vulnerabilities

Updated qtbase5 packages fix security vulnerabilities: QPluginLoader in Qt versions 5.0.0 through 5.13.2 would search for certain plugins first on the current working directory of the application, which allows an attacker that can place files in the file system and influence the working directory...

UBUNTU-CVE-2016-2521

Untrusted search path vulnerability in the WiresharkApplication class in ui/qt/wiresharkapplication.cpp in Wireshark 1.12.x before 1.12.10 and 2.0.x before 2.0.2 on Windows allows local users to gain privileges via a Trojan horse riched20.dll.dll file in the current working directory, related to...