Lucene search
+L

44 matches found

NVD
NVD
•added 2026/09/16 8:16 a.m.•22 views

CVE-2026-84408

QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to execute arbitrary commands with SYSTEM privileges...

8.8CVSS0.00626EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/16 8:16 a.m.•21 views

CVE-2026-81326

QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password...

6.8CVSS0.00138EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/16 7:30 a.m.•22 views

CVE-2026-84408

QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to execute arbitrary commands with SYSTEM privileges...

8.8CVSS8.2AI score0.00626EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/16 7:30 a.m.•37 views

CVE-2026-84408

QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to execute arbitrary commands with SYSTEM privileges...

8.8CVSS0.00626EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/16 7:30 a.m.•37 views

CVE-2026-84408

QND (a client by QualitySoft ) contains an improper access control vulnerability in a named pipe . A local attacker with an existing logon session on an affected Windows PC can exploit this to execute arbitrary commands with SYSTEM privileges , leading to high impact on confidentiality, integrity...

8.8CVSS8.2AI score0.00626EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/16 7:30 a.m.•15 views

EUVD-2026-80227

QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to execute arbitrary commands with SYSTEM privileges...

8.8CVSS8.1AI score0.00626EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/16 7:29 a.m.•36 views

CVE-2026-81326

CVE-2026-81326 affects QND by QualitySoft, a product whose client is installed on Windows PCs. The root cause is a hard-coded cryptographic key , which may allow a local attacker with logged-in access to the client machine to obtain administrator credentials , including an ID and password. The vu...

6.8CVSS6.6AI score0.00138EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/16 7:29 a.m.•20 views

CVE-2026-81326

QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password...

6.8CVSS6.6AI score0.00138EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/16 7:29 a.m.•37 views

CVE-2026-81326

QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password...

6.8CVSS0.00138EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/16 7:29 a.m.•18 views

EUVD-2026-80226

QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password...

6.8CVSS5.9AI score0.00138EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2026/09/16 6:05 a.m.•21 views

Multiple vulnerabilities in QND

Overview QND Standard/Premium provided by QualitySoft Corporation contains multiple vulnerabilities listed below: Use of hard-coded cryptographic key CWE-321 - CVE-2026-81326 Improper access control on a named pipe CWE-782 - CVE-2026-84408 Taisei Ogura of MOTEX Inc. reported this vulnerability to...

8.8CVSS7.2AI score0.00626EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•37 views

PT-2026-93334

QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to execute arbitrary commands with SYSTEM privileges...

8.8CVSS8.1AI score0.00626EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•4 views

CVE-2026-81326: Use of Hard-coded Cryptographic Key

QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password...

6.8CVSS6.5AI score0.00138EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/16 12:00 a.m.•33 views

PT-2026-93333

QND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to obtain administrator credentials, including an ID and password...

6.8CVSS5.9AI score0.00138EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•4 views

CVE-2026-84408: Exposed IOCTL with Insufficient Access Control

QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to execute arbitrary commands with SYSTEM privileges...

8.8CVSS8.2AI score0.00626EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/28 12:00 a.m.•22 views

Hanwha Vision QND-8080R 操作系统命令注入漏洞

Hanwha Vision QND-8080R is a network infrared surveillance camera device produced by Hanwha Vision in South Korea. The Hanwha Vision QND-8080R has a vulnerability related to operating system command injection. This vulnerability arises from insufficient input validation, which may allow specially...

8.5CVSS5.8AI score0.00256EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/28 12:00 a.m.•24 views

Hanwha Vision QND-8080R 输入验证错误漏洞

Hanwha Vision QND-8080R is a network infrared surveillance camera device produced by Hanwha Vision in South Korea. The Hanwha Vision QND-8080R has a vulnerability related to input validation errors. This vulnerability arises from improper handling of data in specific requests, which may lead to...

5.3CVSS5.8AI score0.0024EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/28 12:00 a.m.•26 views

Hanwha Vision QND-8080R 访问控制错误漏洞

Hanwha Vision QND-8080R is a network infrared surveillance camera device produced by Hanwha Vision in South Korea. The Hanwha Vision QND-8080R has a access control vulnerability, which stems from issues with request processing. This vulnerability may lead to accidental access to protected functio...

8.7CVSS5.8AI score0.00193EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/12 9:17 a.m.•12 views

CVE-2025-64701

QND Premium/Advance/Standard Ver.11.0.9i and prior contains a privilege escalation vulnerability, which may allow a user who can log in to a Windows system with the affected product to gain administrator privileges. As a result, sensitive information may be accessed or altered, and arbitrary...

8.5CVSS7.1AI score0.00122EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/11 9:15 a.m.•22 views

CVE-2025-64701

QND Premium/Advance/Standard Ver.11.0.9i and prior contains a privilege escalation vulnerability, which may allow a user who can log in to a Windows system with the affected product to gain administrator privileges. As a result, sensitive information may be accessed or altered, and arbitrary...

8.5CVSS0.00122EPSS
SaveExploits0References2
Rows per page
Query Builder