Lucene search
K

9 matches found

Prion
Prion
added 2023/06/30 8:15 p.m.18 views

Design/Logic Flaw

The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution. The attacker can set LDLIBRARYPATH, set LDPRELOAD, or run an executable file in a debugger...

4.3CVSS7.9AI score0.00091EPSS
Exploits0References2Affected Software2
Vulnrichment
Vulnrichment
added 2023/06/30 12:0 a.m.6 views

CVE-2023-29145

The Malwarebytes EDR 1.0.11 for Linux driver doesn't properly ensure whitelisting of executable libraries loaded by executable files, allowing arbitrary code execution. The attacker can set LDLIBRARYPATH, set LDPRELOAD, or run an executable file in a debugger...

7.9AI score0.00091EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/06/30 12:0 a.m.3 views

Malwarebytes 安全漏洞

Malwarebytes is an application that provides anti-malware functionality to devices from the US-based company Malwarebytes. The software is designed to defend against viruses, spyware, Trojans, worms, dial-up programs, and other malware. debug is a small JavaScript debugging utility open-sourced b...

7.8CVSS7.8AI score0.00091EPSS
Exploits0References3
Cvelist
Cvelist
added 2021/06/24 1:18 p.m.16 views

CVE-2021-29949

When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filename that isn't distributed by Thunderbird. If a computer has already been infected with a malicious library of the alternative filename, and the malicious...

8AI score0.00063EPSS
Exploits0References2
CVE
CVE
added 2021/06/24 1:18 p.m.124 views

CVE-2021-29949

CVE-2021-29949 concerns Thunderbird and the OTR protocol library loading. The issue: during startup, Thunderbird may load a shared OTR library using a filename not distributed by Thunderbird. If a system already hosts a malicious copy of that alternative filename and the library is on the executa...

7.8CVSS7.6AI score0.00063EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2021/03/26 12:0 a.m.3 views

Samsung SMR 安全漏洞

Samsung SMR is a system firmware from Samsung South Korea. It provides storage for system applications. A security vulnerability exists in SMR Mar-2021 Release 1 that allows an attacker to load arbitrary ELF libraries in the DSP. No details of the vulnerability are provided at this time...

7.2CVSS5.8AI score0.01616EPSS
Exploits0References3
NVD
NVD
added 2018/08/15 5:29 p.m.15 views

CVE-2018-8316

A remote code execution vulnerability exists when Internet Explorer improperly validates hyperlinks before loading executable libraries, aka "Internet Explorer Remote Code Execution Vulnerability." This affects Internet Explorer 11, Internet Explorer 10...

7.6CVSS8.1AI score0.29648EPSS
Exploits0References3
Cvelist
Cvelist
added 2018/08/15 5:0 p.m.17 views

CVE-2018-8316

A remote code execution vulnerability exists when Internet Explorer improperly validates hyperlinks before loading executable libraries, aka "Internet Explorer Remote Code Execution Vulnerability." This affects Internet Explorer 11, Internet Explorer 10...

7.4AI score0.29648EPSS
Exploits0References3
CNVD
CNVD
added 2018/08/15 12:0 a.m.2 views

Microsoft Internet Explorer Remote Code Execution Vulnerability (CNVD-2018-16846)

Internet Explorer is a web browser from Microsoft. A remote code execution vulnerability exists in Microsoft Internet Explorer. The vulnerability stems from the program not properly validating hyperlinks before loading executable libraries. A remote attacker could exploit the vulnerability to...

7.6CVSS8.1AI score0.29648EPSS
Exploits0References1
Rows per page
Query Builder