Lucene search
+L

17057 matches found

OSV
OSV
added 2022/07/18 12:15 a.m.10 views

CVE-2021-42923

ShowMyPC 3606 on Windows suffers from a DLL hijack vulnerability. If an attacker overwrites the file %temp%\ShowMyPC-ShowMyPC3606\wodVPN.dll, it will run any malicious code contained in that file. The code will run with normal user privileges unless the user specifically runs ShowMyPC as...

7.3CVSS5.8AI score0.00213EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/07/18 12:00 a.m.12 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00495EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/18 12:00 a.m.13 views

The vulnerability of the Adobe InCopy text creation and editing software lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS8AI score0.00495EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/18 12:00 a.m.9 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00495EPSS
SaveExploits0References2Affected Software1
Fedora
Fedora
added 2022/07/17 1:16 a.m.51 views

[SECURITY] Fedora 35 Update: golang-k8s-kube-aggregator-1.22.0-4.fc35

Aggregator for Kubernetes-style API servers: dynamic registration, discovery summarization, secure proxy...

9.3CVSS3.2AI score0.0995EPSS
SaveExploits4
BDU FSTEC
BDU FSTEC
added 2022/07/15 12:00 a.m.10 views

The vulnerability of the providers.dll library in the Node.js software platform, related to HTTP request processing flaws, allows attackers to execute arbitrary code.

The vulnerability of the providers.dll library in the Node.js software platform is related to an uncontrolled search path during the loading of DLL libraries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.5CVSS7AI score0.01732EPSS
SaveExploits1References4Affected Software1
CNVD
CNVD
added 2022/07/15 12:00 a.m.61 views

Samsung Wearable Manager Information Disclosure Vulnerability

Samsung Wearable Manager is an application for Samsung Samsung mobile devices that connects wearable devices to mobile devices. Samsung Wearable Manager is vulnerable to an information disclosure vulnerability that stems from the installation of an unprotected dynamic receiver, which could be...

5.5CVSS3AI score0.00105EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/07/15 12:00 a.m.11 views

The vulnerability of the software for working with animations in Adobe Character Animator lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of the software for working with animations in Adobe Character Animator is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00461EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/07/14 4:15 p.m.7 views

CVE-2021-45492

In Sage 300 ERP formerly accpac through 6.8.x, the installer configures the C:\Sage\Sage300\Runtime directory to be the first entry in the system-wide PATH environment variable. However, this directory is writable by unprivileged users because the Sage installer fails to set explicit permissions...

7.8CVSS5.8AI score0.00301EPSS
SaveExploits1References2
OSV
OSV
added 2022/07/14 3:15 p.m.6 views

ALPINE-CVE-2022-32223

Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows platforms.This vulnerability can be exploited if the victim has the following dependencies on a Windows machine: OpenSSL has been installed and “C:\Program Files\Common Files\SSL\openssl.cnf”...

7.3CVSS7AI score0.01732EPSS
SaveExploits1References1
OSV
OSV
added 2022/07/14 3:15 p.m.10 views

UBUNTU-CVE-2022-32223

Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows platforms.This vulnerability can be exploited if the victim has the following dependencies on a Windows machine: OpenSSL has been installed and “C:\Program Files\Common Files\SSL\openssl.cnf”...

7.3CVSS6.7AI score0.01732EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/07/14 3:15 p.m.1 views

CVE-2022-32223

Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows platforms.This vulnerability can be exploited if the victim has the following dependencies on a Windows machine: OpenSSL has been installed and “C:\Program Files\Common Files\SSL\openssl.cnf”...

7.3CVSS5.5AI score0.01732EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/13 12:00 a.m.7 views

The vulnerability in the `register.c` component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the register.c component of the Vim text editor is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service interruptions...

7.8CVSS6.8AI score0.01257EPSS
SaveExploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/07/13 12:00 a.m.11 views

The vulnerability of the DLL library of the Microprogramming Software for Sensor Panels from AutomationDirect C-More series EA9 HMI allows a hacker to execute arbitrary code during the installation process.

The vulnerability of the DLL library of C-More sensor panel microprogramming systems series EA9 HMI is related to an uncontrolled search path element. Exploiting this vulnerability could allow a attacker to execute arbitrary code during the installation process...

7.8CVSS7.6AI score0.00356EPSS
SaveExploits0References3Affected Software12
OSV
OSV
added 2022/07/12 11:15 p.m.5 views

CVE-2022-22045

Windows.Devices.Picker.dll Elevation of Privilege Vulnerability...

7.8CVSS7.3AI score0.0055EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/07/12 11:15 p.m.11 views

CVE-2022-22040

Internet Information Services Dynamic Compression Module Denial of Service Vulnerability...

7.5CVSS7.3AI score0.01424EPSS
SaveExploits0References3Affected Software25
OSV
OSV
added 2022/07/12 11:15 p.m.6 views

CVE-2022-22040

Internet Information Services Dynamic Compression Module Denial of Service Vulnerability...

7.3CVSS7.3AI score0.01424EPSS
SaveExploits0References1
NVD
NVD
added 2022/07/12 11:15 p.m.23 views

CVE-2022-22040

Internet Information Services Dynamic Compression Module Denial of Service Vulnerability...

7.5CVSS0.01424EPSS
SaveExploits0References1
Prion
Prion
added 2022/07/12 11:15 p.m.28 views

Denial of service

Internet Information Services Dynamic Compression Module Denial of Service Vulnerability...

7.5CVSS7.2AI score0.01424EPSS
SaveExploits0References1Affected Software5
Cvelist
Cvelist
added 2022/07/12 10:37 p.m.37 views

CVE-2022-22040 Internet Information Services Dynamic Compression Module Denial of Service Vulnerability

...

7.3CVSS8AI score0.01424EPSS
SaveExploits0References1
Rows per page
Query Builder