Lucene search
+L

17118 matches found

CNVD
CNVD
added 2020/04/15 12:00 a.m.8 views

DLL Hijacking Vulnerability in Kingview

KingView is the first industrial configuration software product launched by Beijing Asia Control Technology Company in China. Kingview there is a DLL hijacking vulnerability hijacking vulnerability, attackers can use the vulnerability to load the DLL file for command execution...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2020/04/15 12:00 a.m.4 views

Flush Love Fund suffers from dll hijacking vulnerability

Flush Love Fund is a software with fund quotes query, earnings ranking, comprehensive ratings of major institutions, fund trading, support for online fund buying and selling and other functions. Flush Love Fund has a dll hijacking vulnerability that can be exploited by attackers to execute...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2020/04/15 12:00 a.m.4 views

Baidu.com disk has dll hijacking vulnerability

Baidu.com formerly Baidu Cloud is a cloud storage service launched by Baidu, which has covered mainstream PC and cell phone operating systems. A dll hijacking vulnerability exists in Baidu.com, which can be exploited by an attacker to load an untrusted dynamic link library for command execution...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2020/04/15 12:00 a.m.5 views

2345 Haozhu is vulnerable to dll hijacking.

2345 GoodPress is a compressed file manager. 2345 Haozui has a dll hijacking vulnerability, which can be exploited by an attacker to load a malicious dll and execute arbitrary code...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2020/04/15 12:00 a.m.8 views

DLL Hijacking Vulnerability in Driver Wizard

Driver Wizard is a set of driver management and hardware detection in one, professional-grade driver management and maintenance tools. Driver Wizard suffers from a DLL hijacking vulnerability, which can be exploited by attackers to load untrusted dynamic link libraries for command execution...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2020/04/14 12:00 a.m.5 views

Xunlei X is vulnerable to dll hijacking

Xunlei X is an Internet download tool software developed by Xunlei Corporation. Xunlei X suffers from a dll hijacking vulnerability, which can be exploited by an attacker to load an untrusted dynamic link library for command execution...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2020/04/14 12:00 a.m.6 views

Tencent Computer Management has a dll hijacking vulnerability

Tencent PC Butler is a free security software from Tencent. Tencent Computer Manager has a dll hijacking vulnerability, which can be exploited by attackers to load untrustworthy dynamic link libraries for command execution...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2020/04/14 12:00 a.m.8 views

Tencent's Allk Song suffers from DLL hijacking vulnerability

Tencent National K Song is a karaoke software produced by Tencent, with various functions such as intelligent scoring, professional mixing, friends ring, fun interaction and social sharing. Tencent All K Song has a DLL hijacking vulnerability that can be exploited to load untrusted dynamic link...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2020/04/14 12:00 a.m.2 views

Fast Pressure is vulnerable to dll hijacking

QuickPress is a very convenient and useful compression and decompression software. A dll hijacking vulnerability exists in Crypto, which can be exploited to load untrusted dynamic link libraries for command execution...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2020/04/14 12:00 a.m.11 views

Cool Music is vulnerable to dll hijacking

Cool Music is an online digital music platform. A dll hijacking vulnerability exists in CoolMusic, which can be exploited by an attacker to load an untrusted dynamic link library for command execution...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2020/04/14 12:00 a.m.3 views

QQ is vulnerable to dll hijacking

QQ is an Internet-based instant messaging IM software. QQ suffers from a dll hijacking vulnerability, which can be exploited to load untrusted dynamic link libraries for command execution...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2020/04/14 12:00 a.m.6 views

QQ Browser installation is vulnerable to dll hijacking

QQ Browser is an extremely fast browser developed by Tencent, which supports multiple terminals such as PC, Android and Apple. QQ Browser installation suffers from a dll hijacking vulnerability, which can be exploited by attackers to load untrusted dynamic link libraries for command execution...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2020/04/14 12:00 a.m.13 views

Tencent QQ Music suffers from dll hijacking vulnerability

Tencent QQ Music is an online music service product launched by Tencent. Tencent QQ Music suffers from a dll hijacking vulnerability, which can be exploited by an attacker to load an untrusted dynamic link library for command execution...

7.3AI score
SaveExploits0
Veracode
Veracode
added 2020/04/10 1:01 a.m.33 views

Privilege Escalation

redhat directory server is vulnerable to privilege escalation. It was found that multiple scripts shipped with Red Hat Directory Server set the LDLIBRARYPATH environment variable to an insecure value containing an empty path. A local user able to trick a user running those scripts usually the roo...

6.2CVSS1.9AI score0.00284EPSS
SaveExploits0References7Affected Software2
Veracode
Veracode
added 2020/04/10 12:59 a.m.24 views

Privilege Escalation

rgmanager is vulnerable to privilege escalation. The vulnerability exists as it was discovered that certain resource agent scripts set the LDLIBRARYPATH environment variable to an insecure value containing empty path elements. A local user able to trick a user running those scripts to run them...

6.9CVSS3.3AI score0.00417EPSS
SaveExploits1References10Affected Software2
Veracode
Veracode
added 2020/04/10 12:54 a.m.35 views

Denial Of Service (DoS)

glibc is vulnerable to privilege escalation. It was discovered that the glibc dynamic linker/loader did not handle the $ORIGIN dynamic string token set in the LDAUDIT environment variable securely. A local attacker with write access to a file system containing setuid or setgid binaries could use...

6.9CVSS2.8AI score0.09489EPSS
SaveExploits21References25Affected Software1
Veracode
Veracode
added 2020/04/10 12:49 a.m.37 views

Privilege Escalation

glibc is vulnerable to privilege escalation. The vulnerability exists as it was discovered that the glibc dynamic linker/loader did not perform sufficient safety checks when loading dynamic shared objects DSOs to provide callbacks for its auditing API during the execution of privileged programs. ...

7.2CVSS4.4AI score0.11164EPSS
SaveExploits24References28Affected Software1
Veracode
Veracode
added 2020/04/10 12:11 a.m.37 views

Dynamic Variable Evaluation

SquirrelMail is vulnerable to Dynamic variable evaluation. Users who have an account on a SquirrelMail server and are logged in could use this flaw to overwrite variables which may allow them to read or write other users' preferences or attachments...

6.4CVSS4.1AI score0.09798EPSS
SaveExploits4References32Affected Software1
Microsoft KB
Microsoft KB
added 2020/04/10 12:00 a.m.13 views

Streaming issues that are related to Microsoft Media Foundation in Windows 7

Streaming issues that are related to Microsoft Media Foundation in Windows 7 Symptoms A hotfix is available for Microsoft Media Foundation in Windows 7. This hotfix resolves the following streaming issues that relate to Media Foundation: Issue 1 You cannot stream some audio files to multiple...

5.6AI score
SaveExploits0
OSV
OSV
added 2020/04/09 2:15 p.m.6 views

CVE-2020-9499

Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker sends a specific DDNS test command, which may cause the device to go down...

7.2CVSS7.4AI score0.01501EPSS
SaveExploits0References1
Rows per page
Query Builder