Lucene search
+L

935 matches found

RedHat Linux
RedHat Linux
•added 2022/09/13 9:57 a.m.•20 views

mariadb: server crash in component arg_comparator::compare_real_fixed

A flaw was found in MariaDB. The component, Argcomparator::comparerealfixed, allows attackers to cause a denial of service DoS via specially crafted SQL statements, affecting availability...

7.5CVSS7.3AI score0.02264EPSS
SaveExploits1References4
OSV
OSV
•added 2022/09/07 7:09 a.m.•9 views

MAL-2022-5131 Malicious code in osm-compare (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49b0e14451d493548f05cf4702c97fdd2f47e287d8801919e229430730b3d5f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2022/09/01 2:21 p.m.•15 views

mariadb: server crash in component arg_comparator::compare_real_fixed

A flaw was found in MariaDB. The component, Argcomparator::comparerealfixed, allows attackers to cause a denial of service DoS via specially crafted SQL statements, affecting availability...

7.5CVSS7.3AI score0.02264EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2022/09/01 2:21 p.m.•16 views

mariadb: assertion failure in compare_order_elements

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/sqlwindow.cc, impacting availability...

7.5CVSS7.3AI score0.02174EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2022/08/09 12:23 p.m.•12 views

mariadb: assertion failure in compare_order_elements

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/sqlwindow.cc, impacting availability...

7.5CVSS7.3AI score0.02174EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2022/08/02 10:09 a.m.•14 views

mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c

A flaw was found in the MariaDB Server. A use-after-free in the component, mystrcasecmp8bit, can be exploited via specially crafted SQL statements, impacting availability...

7.5CVSS7.7AI score0.0213EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2022/07/28 4:06 p.m.•13 views

mariadb: server crash in component arg_comparator::compare_real_fixed

A flaw was found in MariaDB. The component, Argcomparator::comparerealfixed, allows attackers to cause a denial of service DoS via specially crafted SQL statements, affecting availability...

7.5CVSS7.3AI score0.02264EPSS
SaveExploits1References4
NCSC
NCSC
•added 2022/07/25 12:00 a.m.•21 views

Vulnerabilities fixed in Scooter Software Beyond Compare

Vulnerabilities have been fixed in Scooter Software Beyond Compare. The vulnerabilities allow a malicious person to execute arbitrary execute arbitrary code under the SYSTEM user's privileges and the obtain elevated user privileges. For the vulnerability with attribute CVE-2022-36414, it is only...

7.8CVSS7.6AI score0.00219EPSS
SaveExploits0
attackerkb
attackerkb
•added 2022/07/23 3:15 a.m.•11 views

CVE-2022-36415

A DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4.4.2 before 4.4.3 when installed via the EXE installer. The uninstaller attempts to load DLLs out of a Windows Temp folder. If a standard user places malicious DLLs in the C:\Windows\Temp\ folder, and...

7.8CVSS7.6AI score0.00219EPSS
SaveExploits0References2
NVD
NVD
•added 2022/07/23 3:15 a.m.•32 views

CVE-2022-36414

There is an elevation of privilege breakout vulnerability in the Windows EXE installer in Scooter Beyond Compare 4.2.0 through 4.4.2 before 4.4.3. Affected versions allow a logged-in user to run applications with elevated privileges via the Clipboard Compare tray app after installation...

6.7CVSS0.00203EPSS
SaveExploits0References1
OSV
OSV
•added 2022/07/23 3:15 a.m.•17 views

CVE-2022-36414

There is an elevation of privilege breakout vulnerability in the Windows EXE installer in Scooter Beyond Compare 4.2.0 through 4.4.2 before 4.4.3. Affected versions allow a logged-in user to run applications with elevated privileges via the Clipboard Compare tray app after installation...

6.7CVSS5.8AI score0.00203EPSS
SaveExploits0References1
NVD
NVD
•added 2022/07/23 3:15 a.m.•34 views

CVE-2022-36415

A DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4.4.2 before 4.4.3 when installed via the EXE installer. The uninstaller attempts to load DLLs out of a Windows Temp folder. If a standard user places malicious DLLs in the C:\Windows\Temp\ folder, and...

7.8CVSS0.00219EPSS
SaveExploits0References1
OSV
OSV
•added 2022/07/23 3:15 a.m.•16 views

CVE-2022-36415

A DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4.4.2 before 4.4.3 when installed via the EXE installer. The uninstaller attempts to load DLLs out of a Windows Temp folder. If a standard user places malicious DLLs in the C:\Windows\Temp\ folder, and...

7.8CVSS7.2AI score0.00219EPSS
SaveExploits0References1
Prion
Prion
•added 2022/07/23 3:15 a.m.•29 views

Privilege escalation

There is an elevation of privilege breakout vulnerability in the Windows EXE installer in Scooter Beyond Compare 4.2.0 through 4.4.2 before 4.4.3. Affected versions allow a logged-in user to run applications with elevated privileges via the Clipboard Compare tray app after installation...

4CVSS6.6AI score0.00203EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/07/23 3:15 a.m.•26 views

Spoofing

A DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4.4.2 before 4.4.3 when installed via the EXE installer. The uninstaller attempts to load DLLs out of a Windows Temp folder. If a standard user places malicious DLLs in the C:\Windows\Temp\ folder, and...

4.4CVSS7.6AI score0.00219EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/07/23 2:33 a.m.•42 views

CVE-2022-36414

There is an elevation of privilege breakout vulnerability in the Windows EXE installer in Scooter Beyond Compare 4.2.0 through 4.4.2 before 4.4.3. Affected versions allow a logged-in user to run applications with elevated privileges via the Clipboard Compare tray app after installation...

6.8AI score0.00203EPSS
SaveExploits0References1
CVE
CVE
•added 2022/07/23 2:33 a.m.•112 views

CVE-2022-36414

CVE-2022-36414 describes an elevation-of-privilege breakout in the Windows EXE installer of Scooter Beyond Compare (versions 4.2.0–4.4.2) that can allow a logged-in user to run applications with elevated privileges via the Clipboard Compare tray app after installation. Affected versions require u...

6.7CVSS6.5AI score0.00203EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/07/23 2:32 a.m.•33 views

CVE-2022-36415

A DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4.4.2 before 4.4.3 when installed via the EXE installer. The uninstaller attempts to load DLLs out of a Windows Temp folder. If a standard user places malicious DLLs in the C:\Windows\Temp\ folder, and...

7.8AI score0.00219EPSS
SaveExploits0References1
CVE
CVE
•added 2022/07/23 2:32 a.m.•84 views

CVE-2022-36415

Scooter Software Beyond Compare is affected by a DLL hijacking vulnerability in its uninstaller for versions 1.8a through 4.4.2 installed via the EXE installer. The uninstaller loads DLLs from the Windows Temp folder and, if a standard user places malicious DLLs there and the uninstaller runs wit...

7.8CVSS7.6AI score0.00219EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2022/07/23 12:00 a.m.•13 views

Scooter Software Beyond Compare 安全漏洞

Scooter Software Beyond Compare is content comparison tool software from Scooter Software. A security vulnerability exists in Scooter Software Beyond Compare versions 4.2.0 through 4.4.2 prior to 4.4.3, which stems from an elevated privilege vulnerability in the Windows EXE installer that allows...

6.7CVSS6.6AI score0.00203EPSS
SaveExploits0References2
Rows per page
Query Builder