Lucene search
+L

19029 matches found

CNNVD
CNNVD
added 2022/09/09 12:00 a.m.10 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices version 5.1.47 for international and version 5.0.63 for Korea, which stems from SpayNotification in...

6.5CVSS6.5AI score0.00173EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/09/09 12:00 a.m.15 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability exists in SAMSUNG Mobile devices version 5.1.47 for international and version 5.0.63 for Korea, which stems from NotiCenterUtils in...

6.5CVSS6.5AI score0.00173EPSS
SaveExploits0References3
Malwarebytes
Malwarebytes
added 2022/09/08 11:00 a.m.78 views

Your HP Support Assistant needs an update!

HP has issued a new version of its HP Support Assistant tool. Users of HP Support Assistant versions earlier than 9.11 and Fusion versions earlier than 1.38.2601.0 are affected by a high severity vulnerability. According to HP it is possible for an attacker to exploit a dynamic-link library DLL...

8.8AI score0.02776EPSS
SaveExploits0
OSV
OSV
added 2022/09/07 2:15 p.m.12 views

CVE-2022-36271

Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...

7.8CVSS5.8AI score0.00511EPSS
SaveExploits2References2
NVD
NVD
added 2022/09/07 2:15 p.m.40 views

CVE-2022-36271

Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...

7.8CVSS0.00511EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2022/09/07 2:15 p.m.4 views

CVE-2022-36271

Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...

7.8CVSS7.1AI score0.00511EPSS
SaveExploits2References3
Prion
Prion
added 2022/09/07 2:15 p.m.27 views

Design/Logic Flaw

Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...

4.4CVSS7.5AI score0.00511EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2022/09/07 1:46 p.m.50 views

CVE-2022-36271

Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...

7.8AI score0.00511EPSS
SaveExploits2References1
CVE
CVE
added 2022/09/07 1:46 p.m.83 views

CVE-2022-36271

CVE-2022-36271 affects Outbyte PC Repair Installation File 1.7.112.7856, where a DLL hijacking flaw (missing iertutil.dll) enables a local attacker to place a malicious DLL with the same name and obtain admin privileges. Affected component is the installation file; root cause is uncontrolled sear...

7.8CVSS7.5AI score0.00511EPSS
SaveExploits2References1Affected Software1
Hewlett-Packard
Hewlett-Packard
added 2022/09/06 12:00 a.m.56 views

Privilege escalation in HP Support Assistant

HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance Tune-up. HP strives to...

7.8CVSS1.5AI score0.02776EPSS
SaveExploits0
CNVD
CNVD
added 2022/09/02 12:00 a.m.49 views

HUAWEI WS7200-10 hijacking vulnerability

HUAWEI WS7200-10 is a wireless router from Huawei China.A security vulnerability exists in the HUAWEI WS7200-10. An attacker exploits the vulnerability to cause message hijacking...

4.3CVSS2AI score0.00262EPSS
SaveExploits0References1
PyPA
PyPA
added 2022/09/01 6:51 p.m.10 views

PYSEC-2022-259

An attacker who obtains a JWT can arbitrarily forge its contents without knowing the secret key. Depending on the application, this may for example enable the attacker to spoof other user's identities, hijack their sessions, or bypass authentication...

9.1CVSS6.9AI score0.04203EPSS
SaveExploits2References1Affected Software1
Malwarebytes
Malwarebytes
added 2022/09/01 12:00 p.m.72 views

TikTok vulnerability could have allowed hijackers to take over accounts

Microsoft has released a detailed rundown of an issue, now fixed, which was potentially dangerous for users of TikTok. The problem, flagged as a "high-severity vulnerability" by Microsoft, required several steps chained together in order to function. Attackers making use of it could have...

6.8CVSS8.7AI score0.16034EPSS
SaveExploits0
Microsoft Secure
Microsoft Secure
added 2022/08/31 4:00 p.m.95 views

Vulnerability in TikTok Android app could lead to one-click account hijacking

Microsoft discovered a high-severity vulnerability in the TikTok Android application, which could have allowed attackers to compromise users’ accounts with a single click. The vulnerability, which would have required several issues to be chained together to exploit, has been fixed and we did not...

6.8CVSS8.8AI score0.16034EPSS
SaveExploits0
Microsoft Malware Protection
Microsoft Malware Protection
added 2022/08/31 4:00 p.m.118 views

Vulnerability in TikTok Android app could lead to one-click account hijacking

Microsoft discovered a high-severity vulnerability in the TikTok Android application, which could have allowed attackers to compromise users’ accounts with a single click. The vulnerability, which would have required several issues to be chained together to exploit, has been fixed and we did not...

6.8CVSS8.8AI score0.16034EPSS
SaveExploits0
CNNVD
CNNVD
added 2022/08/31 12:00 a.m.12 views

Huawei WS7200-10 安全漏洞

HUAWEI WS7200-10 is a wireless router from Huawei China.A security vulnerability exists in the HUAWEI WS7200-10. An attacker exploits the vulnerability to cause message hijacking...

4.3CVSS6.7AI score0.00262EPSS
SaveExploits0References3
Huawei
Huawei
added 2022/08/31 12:00 a.m.46 views

Security Advisory - Traffic Hijacking Vulnerability in Huawei Routers

There is a traffic hijacking vulnerability in Huawei routers. Successful exploitation of this vulnerability can cause packets to be hijacked by attackers. Vulnerability ID: HWPSIRT-2021-21766 This vulnerability has been assigned a Common Vulnerabilities and Exposures CVE ID: CVE-2021-46835. For...

4.3CVSS4.5AI score0.00262EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2022/08/31 12:00 a.m.13 views

PT-2022-4606 · Ws7200-10 · Ws7200-10

Name of the Vulnerable Software and Affected Versions: WS7200-10 version 11.0.2.13 Description: The issue is related to errors in processing ICMP packets, which can allow a remote attacker to gain unauthorized access to protected information or cause a denial of service. Additionally, there is a...

6.2CVSS4.7AI score0.00262EPSS
SaveExploits0References4
OSV
OSV
added 2022/08/30 9:15 p.m.11 views

CVE-2022-37173

An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacking attack on C:\Program.exe...

7.8CVSS6.1AI score0.00412EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/30 9:15 p.m.6 views

CVE-2022-37173

An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacking attack on C:\Program.exe...

7.8CVSS7.5AI score0.00412EPSS
SaveExploits0References2
Rows per page
Query Builder