NBBDownloader.ocx ActiveX 参数注入漏洞

SearchDomino.com ActiveX is an application from SearchDomino.com, Inc. Real-Time, Collaborative Enabled Programs NBBDownloader.ocx ActiveX suffers from a parameter injection vulnerability that can be exploited by remote attackers to trick users into visiting a crafted web page, which can cause...

PT-2021-12673

Name of the Vulnerable Software and Affected Versions: Groupware affected versions not specified Description: The issue allows remote files to be downloaded and executed by setting the arguments to the ActiveX method in the NBBDownloader.ocx ActiveX Control. A remote attacker could induce a user ...

CVE-2020-7850: Improper Neutralization of Argument Delimiters in a Command

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection...

CVE-2021-26869

Windows ActiveX Installer Service Information Disclosure Vulnerability...

CVE-2021-26869

Windows ActiveX Installer Service Information Disclosure Vulnerability...

Information disclosure

Windows ActiveX Installer Service Information Disclosure Vulnerability...

CVE-2021-26869

Windows ActiveX Installer Service Information Disclosure Vulnerability...

CVE-2021-26869

CVE-2021-26869 affects Windows via the ActiveX Installer Service, described as an Information Disclosure Vulnerability. The available documentation (NVD/NVD entry) indicates a LOCAL attack vector with LOW attack complexity and no user interaction, impacting confidentiality (partial to high depend...

CVE-2021-26869 Windows ActiveX Installer Service Information Disclosure Vulnerability

...

CVE-2021-26869 Windows ActiveX Installer Service Information Disclosure Vulnerability

...

CVE-2021-26869: Undefined Security Weakness

Windows ActiveX Installer Service Information Disclosure Vulnerability...

Windows ActiveX Installer Service Information Disclosure Vulnerability

...

PT-2021-2375 · Microsoft · Windows Activex Installer Service +1

Name of the Vulnerable Software and Affected Versions: Windows ActiveX Installer Service affected versions not specified Description: The issue is related to insecure privilege management in the Windows ActiveX Installer Service component. It allows an attacker to elevate their privileges. The...

Microsoft Windows 信息泄露漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation USA. An information disclosure vulnerability exists in the Windows ActiveX Installer Service. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-base...

CVE-2021-27232

The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This can be exploited by a remote attacker to potentially execute arbitrary attacker-supplied code. The victim would have to visit a malicious webpage...

CVE-2021-27232

The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This can be exploited by a remote attacker to potentially execute arbitrary attacker-supplied code. The victim would have to visit a malicious webpage...

Stack overflow

The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This can be exploited by a remote attacker to potentially execute arbitrary attacker-supplied code. The victim would have to visit a malicious webpage...

CVE-2021-27232

The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This can be exploited by a remote attacker to potentially execute arbitrary attacker-supplied code. The victim would have to visit a malicious webpage...

PT-2021-17339

Name of the Vulnerable Software and Affected Versions: Pelco Digital Sentry Server version 7.18.72.11464 Description: The issue is related to a stack-based buffer overflow in the SetCameraConnectionParameter of the RTSPLive555.dll ActiveX control. This can be exploited by a remote attacker to...

CVE-2021-27232: Out-of-bounds Write

The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This can be exploited by a remote attacker to potentially execute arbitrary attacker-supplied code. The victim would have to visit a malicious webpage...