483 matches found
JVN#77885134: The installer of Baidu Browser may insecurely load Dynamic Link Libraries
Baidu Browser provided by Baidu, Inc. is a Web browser. The installer of Baidu Browser contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer...
Denial of Service Vulnerability in Baidu Antivirus (CNVD-2018-19311)
Baidu Antivirus is a new professional antivirus software from Baidu, which combines Baidu's powerful cloud computing, massive data learning capabilities and Baidu's self-developed anti-virus engine expertise. Baidu antivirus software BdSanBbox.sys driver has a denial of service vulnerability, the...
Baidu Antivirus has Denial of Service Vulnerability
Baidu Antivirus is a new professional antivirus software from Baidu, which combines Baidu's powerful cloud computing, massive data learning capabilities and Baidu's self-developed anti-virus engine expertise. Baidu Antivirus BdSanBbox.sys driver has a denial-of-service vulnerability that can be...
react-native-baidu-voice-synthesizer code execution vulnerability
react-native-baidu-voice-synthesizer is a speech synthesizer for use in Node.js. A security vulnerability exists in react-native-baidu-voice-synthesizer, which originates when the program downloads a binary file over an unencrypted HTTP connection. A remote attacker could exploit the vulnerabilit...
CVE-2016-10697
react-native-baidu-voice-synthesizer is a baidu voice speech synthesizer for react native. react-native-baidu-voice-synthesizer downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources...
CVE-2016-10697
react-native-baidu-voice-synthesizer is a baidu voice speech synthesizer for react native. react-native-baidu-voice-synthesizer downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources...
CVE-2016-10697
The vulnerability CVE-2016-10697 affects react-native-baidu-voice-synthesizer, which downloads resources over HTTP. The underlying issue is unencrypted network requests, enabling MITM interception and potential remote code execution by substituting resources with attacker-controlled copies. Multi...
CVE-2016-10697
react-native-baidu-voice-synthesizer is a baidu voice speech synthesizer for react native. react-native-baidu-voice-synthesizer downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested resources...
Baidu Analytics - Critical - Unsupported - SA-CONTRIB-2018-029
The security team is marking this module unsupported. There is a known security issue with the module that has not been fixed by the maintainer. If you would like to maintain this module, please read: https://www.drupal.org/node/251466. The security team marks all unsupported modules critical by...
music.baidu.com XSS vulnerability
Open Bug Bounty ID: OBB-448554 Description| Value ---|--- Affected Website:| music.baidu.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
Memory corruption vulnerability exists in Baidu Video (CNVD-2017-35530)
Baidu Video is a new experience player newly launched by Baidu. It supports video and audio files in mainstream media formats and realizes local playback and online on-demand playback. A memory corruption vulnerability exists in Baidu Video Player when parsing special mkv format videos, which can...
Memory Corruption Vulnerability in Baidu Input Method
Baidu Input Method is an intelligent input method based on Baidu's data mining and Chinese word segmentation technology. A memory corruption vulnerability exists in Baidu Input Method when parsing and installing specific skins, which can be exploited by attackers to cause a denial of service atta...
Baidu Video has memory corruption vulnerability
Baidu Video is a new experience player newly launched by Baidu. It supports video and audio files in mainstream media formats and realizes local playback and online on-demand playback. A memory corruption vulnerability exists in the FFSplitter module of Baidu AV player when parsing special ogg...
Baidu UEditor Cross-Site Scripting Vulnerability
Baidu UEditor is China's Baidu Baidu company's set of open source HTML editor . A cross-site scripting vulnerability exists in Baidu UEditor version 1.4.3.3. A remote attacker can leverage the SRC attribute of the IFRAME element to inject arbitrary web script or HTML...
Buffer Overflow Vulnerability in Baidu Video
Baidu Video is a new experience player newly launched by Baidu. It supports video and audio files in mainstream media formats and realizes local playback and online on-demand playback. A buffer overflow vulnerability exists in Baidu AV player when parsing videos in a particular webm format. An...
How to install public store APP via Baidu Store
Users in China wants to know how to install public store APPs from Baidu stores...
Baidu IME Untrusted Search Path Vulnerability
Baidu IME is a Japanese input method from the Chinese company Baidu.Install is one of the installation programs. An untrusted search path vulnerability exists in the installer in Baidu IME 3.6.1.6 and earlier versions. A remote attacker can exploit this vulnerability with a malicious DLL to gain...
CVE-2017-2221
Untrusted search path vulnerability in Installer of Baidu IME Ver3.6.1.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
Design/Logic Flaw
Untrusted search path vulnerability in Installer of Baidu IME Ver3.6.1.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...