Lucene search
+L

11682 matches found

NVD
NVD
•added 2020/06/30 2:15 p.m.•36 views

CVE-2019-19161

CyMiInstaller322 ActiveX which runs MIPLATFORM downloads files required to run applications. A vulnerability in downloading files by CyMiInstaller322 ActiveX caused by an attacker to download randomly generated DLL files and MIPLATFORM to load those DLLs due to insufficient verification...

7.2CVSS0.01144EPSS
SaveExploits0References2
Prion
Prion
•added 2020/06/30 2:15 p.m.•22 views

Authorization

CyMiInstaller322 ActiveX which runs MIPLATFORM downloads files required to run applications. A vulnerability in downloading files by CyMiInstaller322 ActiveX caused by an attacker to download randomly generated DLL files and MIPLATFORM to load those DLLs due to insufficient verification...

6.5CVSS6.9AI score0.01144EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/06/30 1:34 p.m.•45 views

CVE-2019-19161 To be able to change Dll Files to preload with missing support for integrity check vulnerability MIPLATFORM ActiveX of TOBESOFT.CO.LTD,

CyMiInstaller322 ActiveX which runs MIPLATFORM downloads files required to run applications. A vulnerability in downloading files by CyMiInstaller322 ActiveX caused by an attacker to download randomly generated DLL files and MIPLATFORM to load those DLLs due to insufficient verification...

7.2CVSS6.9AI score0.01144EPSS
SaveExploits0References2
CVE
CVE
•added 2020/06/30 1:34 p.m.•58 views

CVE-2019-19161

CVE-2019-19161 corresponds to a vulnerability in the CyMiInstaller322 ActiveX used with MIPLATFORM. The issue is described as a flaw in the file-downloading process where an attacker could cause the ActiveX to download randomly generated DLL files and have MIPLATFORM load those DLLs due to insuff...

7.2CVSS6.9AI score0.01144EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2020/06/30 12:00 a.m.•2 views

PT-2020-10066

Name of the Vulnerable Software and Affected Versions CyMiInstaller322 ActiveX affected versions not specified Description A vulnerability in the CyMiInstaller322 ActiveX component, which is used by MIPLATFORM to download files required for application execution, allows an attacker to download...

7.2CVSS0.01144EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/30 12:00 a.m.•7 views

CVE-2019-19161: Untrusted Search Path

CyMiInstaller322 ActiveX which runs MIPLATFORM downloads files required to run applications. A vulnerability in downloading files by CyMiInstaller322 ActiveX caused by an attacker to download randomly generated DLL files and MIPLATFORM to load those DLLs due to insufficient verification...

7.2CVSS5.8AI score0.01144EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
•added 2020/06/09 7:00 a.m.•48 views

VBScript Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

7.6CVSS8.1AI score0.07175EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2020/06/09 7:00 a.m.•47 views

VBScript Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

7.6CVSS8.1AI score0.07082EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2020/06/09 7:00 a.m.•40 views

VBScript Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

7.6CVSS8.1AI score0.08022EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2020/06/09 7:00 a.m.•33 views

VBScript Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

7.6CVSS8.1AI score0.07175EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2020/06/09 7:00 a.m.•48 views

VBScript Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

7.6CVSS8.1AI score0.08022EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2020/06/09 7:00 a.m.•37 views

VBScript Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

7.6CVSS8.1AI score0.07175EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2020/06/09 12:00 a.m.•129 views

KB4561600: Security update for Adobe Flash Player (June 2020)

The remote Windows host is missing security update KB4561600. It is, therefore, affected by an use after free vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted file, to execute arbitrary code within the context of the user. C Tenable Network Security, In...

10CVSS8.8AI score0.0756EPSS
SaveExploits0References3
CNVD
CNVD
•added 2020/05/29 12:00 a.m.•25 views

Unspecified vulnerability in Kaoni ezHTTPTrans (CNVD-2021-37778)

Kaoni ezHTTPTrans is a forwarding proxy software. A security vulnerability exists in Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and earlier versions. A remote attacker can exploit this vulnerability to download arbitrary files and execute code...

9.8CVSS7.2AI score0.00748EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2020/05/28 2:15 p.m.•11 views

CVE-2020-7812

Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution by rebooting the victim’s PC...

9.8CVSS9.2AI score0.00748EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2020/05/28 1:12 p.m.•38 views

CVE-2020-7812 Kaoni ezHTTPTrans Active-X File Download and Execution Vulnerability

Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution by rebooting the victim’s PC...

7.8CVSS9.6AI score0.00748EPSS
SaveExploits0References2
CVE
CVE
•added 2020/05/28 1:12 p.m.•94 views

CVE-2020-7812

CVE-2020-7812 affects Kaoni ezHTTPTrans (Ezhttptrans.ocx) ActiveX Control in versions ≤ 1.0.0.70. The vulnerability grants a remote attacker the ability to download arbitrary files by manipulating arguments to the ActiveX method, and can be leveraged for code execution by rebooting the victim’s P...

9.8CVSS9AI score0.00748EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2020/05/28 12:00 a.m.•3 views

PT-2020-19809

Name of the Vulnerable Software and Affected Versions Kaoni ezHTTPTrans versions 1.0.0.70 and prior Description The issue allows a remote attacker to download arbitrary files by setting specific arguments to an ActiveX method, potentially leading to code execution if the victim's PC is rebooted...

9.8CVSS0.00748EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/28 12:00 a.m.•6 views

CVE-2020-7812: Download of Code Without Integrity Check

Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution by rebooting the victim’s PC...

9.8CVSS8.5AI score0.00748EPSS
SaveExploits0References3
CNVD
CNVD
•added 2020/05/25 12:00 a.m.•52 views

Unspecified Vulnerability in Kaoni ezHTTPTrans

Kaoni ezHTTPTrans is a forwarding proxy software. A security vulnerability exists in Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and earlier versions. A remote attacker can exploit the vulnerability to download and execute arbitrary files with specially crafted parameters...

9.8CVSS7.5AI score0.00748EPSS
SaveExploits0References1
Rows per page
Query Builder