737 matches found
Corel Roxio Creator LJB 代码问题漏洞
Corel Roxio Creator LJB is a CD/DVD burning software application from Corel Digital Technology Corel Canada. It makes capturing and converting media easy. A security vulnerability exists in Corel Roxio Creator LJB that originates when the supplied Roxio Creator LJB launches another program with a...
JVN#13075438: Corel Roxio Creator LJB starts a program with an unquoted file path
Roxio Creator LJB provided by Corel Corporation starts another program with an unquoted file path CWE-428. Impact Since a registered Windows service path contains spaces and are unquoted, if a malicious executable is placed on a certain path, the executable may be executed with the privilege of t...
UNISOC chipset 安全漏洞
The UNISOC chipset is an integrated circuit chipset from China's Unisoc Corporation. A security vulnerability exists in the UNISOC chipset, which stems from a lack of privilege checking in its windows manager service that allows an attacker to set up the windows manager service without additional...
CVE-2022-3193
An HTML injection/reflected Cross-site scripting XSS vulnerability was found in the ovirt-engine. A parameter "errordescription" fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages...
Cross site scripting
An HTML injection/reflected Cross-site scripting XSS vulnerability was found in the ovirt-engine. A parameter "errordescription" fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages...
CVE-2022-3193
An HTML injection/reflected Cross-site scripting XSS vulnerability was found in the ovirt-engine. A parameter "errordescription" fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages...
CVE-2022-3193
An HTML injection/reflected Cross-site scripting XSS vulnerability was found in the ovirt-engine. A parameter "errordescription" fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages...
CVE-2022-3193
An HTML injection/reflected Cross-site scripting XSS vulnerability was found in the ovirt-engine. A parameter "errordescription" fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages...
CVE-2022-3193
An HTML injection/reflected Cross-site scripting XSS vulnerability was found in the ovirt-engine. A parameter "errordescription" fails to sanitize the entry, allowing the vulnerability to trigger on the Windows Service Accounts home pages...
ovirt-engine 跨站脚本漏洞
ovirt-engine is an open source virtualization management engine. A security vulnerability exists in ovirt-engine, which stems from the parameter "errordescription" that fails to clear certain entries, resulting in the injection of reflective cross-site scripting on the home page of a Windows...
PT-2022-4900 · Ovirt · Ovirt Engine
Name of the Vulnerable Software and Affected Versions: ovirt-engine affected versions not specified Description: The issue is related to the ovirt-engine management tool for virtual infrastructure, which fails to protect its web page structure when handling the error description parameter. This...
CVE-2022-36344
An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple products for corporate users as in Ichitaro through Pro5 and others. Since the affected product starts another program with an unquoted file path, a malicious file may be executed...
CVE-2022-36344
An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple products for corporate users as in Ichitaro through Pro5 and others. Since the affected product starts another program with an unquoted file path, a malicious file may be executed...
Design/Logic Flaw
An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple products for corporate users as in Ichitaro through Pro5 and others. Since the affected product starts another program with an unquoted file path, a malicious file may be executed...
CVE-2022-36344
CVE-2022-36344 describes an unquoted search path vulnerability in JustSystems JUST Online Update for J-License, bundled with various corporate products (Ichitaro through Pro5 and others). The root cause is an unquoted file path used to start a secondary program from the Windows service, enabling ...
CVE-2022-36344
An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple products for corporate users as in Ichitaro through Pro5 and others. Since the affected product starts another program with an unquoted file path, a malicious file may be executed...
PT-2022-23320 · Justsystems · Atok +12
Name of the Vulnerable Software and Affected Versions: JustSystems JUST Online Update for J-License versions affected versions not specified Description: An unquoted search path issue exists in the JustSystems JUST Online Update for J-License, which is bundled with various products, including...
"JustSystems JUST Online Update for J-License" starts a program with an unquoted file path
Overview "JustSystems JUST Online Update for J-License" is bundled with multiple products for corporate users provided by JustSystems Corporation, as in Ichitaro through Pro5 and others, and it is registered as a Windows service. "JustSystems JUST Online Update for J-License" starts another progr...
JVN#57073973: "JustSystems JUST Online Update for J-License" starts a program with an unquoted file path
"JustSystems JUST Online Update for J-License" is bundled with multiple products for corporate users provided by JustSystems Corporation, as in Ichitaro through Pro5 and others, and it is registered as a Windows service. "JustSystems JUST Online Update for J-License" starts another program with a...
