487 matches found
CVE-2018-0692
Untrusted search path vulnerability in Baidu Browser Version 43.23.1000.500 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2018-0692
CVE-2018-0692 concerns an untrusted search path vulnerability in Baidu Browser, where Baidu Browser 43.23.1000.500 and earlier can be exploited via a Trojan horse DLL located in an unspecified directory, enabling privilege escalation and arbitrary code execution with the caller’s privileges. Conn...
Baidu Browser Installer DLL Search Path Vulnerability
Baidu Browser is a web browser. A DLL search path vulnerability in the Baidu Browser installer allows an attacker to execute arbitrary code using the user's permission to invoke the installer...
The installer of Baidu Browser may insecurely load Dynamic Link Libraries
Overview Baidu Browser provided by Baidu, Inc. is a Web browser. The installer of Baidu Browser contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Asuka Nakajima of NTT Secure Platform Laboratories reported this vulnerability to IPA...
JVN#77885134: The installer of Baidu Browser may insecurely load Dynamic Link Libraries
Baidu Browser provided by Baidu, Inc. is a Web browser. The installer of Baidu Browser contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer...
Denial of Service Vulnerability in Baidu Antivirus (CNVD-2018-19311)
Baidu Antivirus is a new professional antivirus software from Baidu, which combines Baidu's powerful cloud computing, massive data learning capabilities and Baidu's self-developed anti-virus engine expertise. Baidu antivirus software BdSanBbox.sys driver has a denial of service vulnerability, the...
Baidu Antivirus has Denial of Service Vulnerability
Baidu Antivirus is a new professional antivirus software from Baidu, which combines Baidu's powerful cloud computing, massive data learning capabilities and Baidu's self-developed anti-virus engine expertise. Baidu Antivirus BdSanBbox.sys driver has a denial-of-service vulnerability that can be...
react-native-baidu-voice-synthesizer code execution vulnerability
react-native-baidu-voice-synthesizer is a speech synthesizer for use in Node.js. A security vulnerability exists in react-native-baidu-voice-synthesizer, which originates when the program downloads a binary file over an unencrypted HTTP connection. A remote attacker could exploit the vulnerabilit...
CVE-2016-10697
react-native-baidu-voice-synthesizer is a baidu voice speech synthesizer for react native. react-native-baidu-voice-synthesizer downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources...
CVE-2016-10697
react-native-baidu-voice-synthesizer is a baidu voice speech synthesizer for react native. react-native-baidu-voice-synthesizer downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources...
CVE-2016-10697
react-native-baidu-voice-synthesizer is a baidu voice speech synthesizer for react native. react-native-baidu-voice-synthesizer downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources...
CVE-2016-10697
The vulnerability CVE-2016-10697 affects react-native-baidu-voice-synthesizer, which downloads resources over HTTP. The underlying issue is unencrypted network requests, enabling MITM interception and potential remote code execution by substituting resources with attacker-controlled copies. Multi...
Baidu Analytics - Critical - Unsupported - SA-CONTRIB-2018-029
The security team is marking this module unsupported. There is a known security issue with the module that has not been fixed by the maintainer. If you would like to maintain this module, please read: https://www.drupal.org/node/251466. The security team marks all unsupported modules critical by...
music.baidu.com XSS vulnerability
Open Bug Bounty ID: OBB-448554 Description| Value ---|--- Affected Website:| music.baidu.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
Memory corruption vulnerability exists in Baidu Video (CNVD-2017-35530)
Baidu Video is a new experience player newly launched by Baidu. It supports video and audio files in mainstream media formats and realizes local playback and online on-demand playback. A memory corruption vulnerability exists in Baidu Video Player when parsing special mkv format videos, which can...
Memory Corruption Vulnerability in Baidu Input Method
Baidu Input Method is an intelligent input method based on Baidu's data mining and Chinese word segmentation technology. A memory corruption vulnerability exists in Baidu Input Method when parsing and installing specific skins, which can be exploited by attackers to cause a denial of service atta...
Baidu Video has memory corruption vulnerability
Baidu Video is a new experience player newly launched by Baidu. It supports video and audio files in mainstream media formats and realizes local playback and online on-demand playback. A memory corruption vulnerability exists in the FFSplitter module of Baidu AV player when parsing special ogg...
Baidu UEditor Cross-Site Scripting Vulnerability
Baidu UEditor is China's Baidu Baidu company's set of open source HTML editor . A cross-site scripting vulnerability exists in Baidu UEditor version 1.4.3.3. A remote attacker can leverage the SRC attribute of the IFRAME element to inject arbitrary web script or HTML...
Buffer Overflow Vulnerability in Baidu Video
Baidu Video is a new experience player newly launched by Baidu. It supports video and audio files in mainstream media formats and realizes local playback and online on-demand playback. A buffer overflow vulnerability exists in Baidu AV player when parsing videos in a particular webm format. An...
