Lucene search
+L

10868 matches found

OSV
OSV
added 2021/03/29 4:15 p.m.8 views

CVE-2020-7850

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection...

7.8CVSS5.8AI score0.00773EPSS
SaveExploits0References2
NVD
NVD
added 2021/03/29 4:15 p.m.31 views

CVE-2020-7850

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection...

7.8CVSS0.00773EPSS
SaveExploits0References2
Prion
Prion
added 2021/03/29 4:15 p.m.22 views

Design/Logic Flaw

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection...

6.8CVSS7.5AI score0.00773EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/03/29 3:45 p.m.47 views

CVE-2020-7850 Douzone ActiveX File Download and Execution Vulnerability

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection...

7.8CVSS7.6AI score0.00773EPSS
SaveExploits0References2
CVE
CVE
added 2021/03/29 3:45 p.m.59 views

CVE-2020-7850

The CVE-2020-7850 entry concerns the NBBDownloader.ocx ActiveX control in Groupware. Descriptions across sources indicate a vulnerability that allows remote files to be downloaded and executed by manipulating arguments to the ActiveX method, enabling a remote attacker to lure a user to a crafted ...

7.8CVSS7.6AI score0.00773EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2021/03/29 12:00 a.m.13 views

NBBDownloader.ocx ActiveX 参数注入漏洞

SearchDomino.com ActiveX is an application from SearchDomino.com, Inc. Real-Time, Collaborative Enabled Programs NBBDownloader.ocx ActiveX suffers from a parameter injection vulnerability that can be exploited by remote attackers to trick users into visiting a crafted web page, which can cause...

7.8CVSS7.6AI score0.00773EPSS
SaveExploits0References3
OSV
OSV
added 2021/03/11 4:15 p.m.9 views

CVE-2021-26869

Windows ActiveX Installer Service Information Disclosure Vulnerability...

5.5CVSS5.8AI score0.00957EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/11 4:15 p.m.17 views

CVE-2021-26869

Windows ActiveX Installer Service Information Disclosure Vulnerability...

5.5CVSS0.00957EPSS
SaveExploits0References2
Prion
Prion
added 2021/03/11 4:15 p.m.19 views

Information disclosure

Windows ActiveX Installer Service Information Disclosure Vulnerability...

2.1CVSS6.1AI score0.00957EPSS
SaveExploits0References1Affected Software5
ATTACKERKB
ATTACKERKB
added 2021/03/11 4:15 p.m.6 views

CVE-2021-26869

Windows ActiveX Installer Service Information Disclosure Vulnerability...

5.5CVSS6.3AI score0.00957EPSS
SaveExploits0References2Affected Software23
Vulnrichment
Vulnrichment
added 2021/03/11 3:39 p.m.14 views

CVE-2021-26869 Windows ActiveX Installer Service Information Disclosure Vulnerability

...

5.5CVSS6.8AI score0.00957EPSS
SaveExploits0References1
CVE
CVE
added 2021/03/11 3:39 p.m.104 views

CVE-2021-26869

CVE-2021-26869 affects Windows via the ActiveX Installer Service, described as an Information Disclosure Vulnerability. The available documentation (NVD/NVD entry) indicates a LOCAL attack vector with LOW attack complexity and no user interaction, impacting confidentiality (partial to high depend...

5.5CVSS7AI score0.00957EPSS
SaveExploits0References2Affected Software7
Cvelist
Cvelist
added 2021/03/11 3:39 p.m.43 views

CVE-2021-26869 Windows ActiveX Installer Service Information Disclosure Vulnerability

...

5.5CVSS7.5AI score0.00957EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2021/03/09 4:00 p.m.45 views

Windows ActiveX Installer Service Information Disclosure Vulnerability

...

5.5CVSS6.5AI score0.00957EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/03/09 12:00 a.m.14 views

Microsoft Windows 信息泄露漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation USA. An information disclosure vulnerability exists in the Windows ActiveX Installer Service. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-base...

5.5CVSS5.7AI score0.00957EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/03/09 12:00 a.m.6 views

PT-2021-2375 · Microsoft · Windows Activex Installer Service +1

Name of the Vulnerable Software and Affected Versions: Windows ActiveX Installer Service affected versions not specified Description: The issue is related to insecure privilege management in the Windows ActiveX Installer Service component. It allows an attacker to elevate their privileges. The...

6.8CVSS5.1AI score0.00957EPSS
SaveExploits0References7
OSV
OSV
added 2021/02/16 3:15 p.m.7 views

CVE-2021-27232

The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This can be exploited by a remote attacker to potentially execute arbitrary attacker-supplied code. The victim would have to visit a malicious webpage...

8.8CVSS7.9AI score0.01738EPSS
SaveExploits1References2
Prion
Prion
added 2021/02/16 3:15 p.m.17 views

Stack overflow

The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This can be exploited by a remote attacker to potentially execute arbitrary attacker-supplied code. The victim would have to visit a malicious webpage...

6.8CVSS8.8AI score0.01738EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/02/16 3:15 p.m.8 views

CVE-2021-27232

The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This can be exploited by a remote attacker to potentially execute arbitrary attacker-supplied code. The victim would have to visit a malicious webpage...

8.8CVSS8.9AI score0.01738EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2021/02/16 2:28 p.m.36 views

CVE-2021-27232

The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This can be exploited by a remote attacker to potentially execute arbitrary attacker-supplied code. The victim would have to visit a malicious webpage...

9AI score0.01738EPSS
SaveExploits1References2
Rows per page
Query Builder