Lucene search
+L

389 matches found

BDU FSTEC
BDU FSTEC
added 2020/03/10 12:0 a.m.8 views

The vulnerability of the Input Method Editor (IME) component of the Windows operating system, which allows a hacker to gain elevated privileges

The vulnerability of the Input Method Editor IME component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00951EPSS
SaveExploits0References3
CNVD
CNVD
added 2020/03/05 12:0 a.m.2 views

Baidu Five Strokes Input Method Exploits Dll Hijacking Vulnerability

Baidu 5-stroke Input Method is a Chinese 5-stroke input method software under Baidu. Baidu Five Strokes Input Method suffers from a Dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute arbitrary code...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2020/03/05 12:0 a.m.2 views

Baidu Pinyin Input Method Exploits Dll Hijacking Vulnerability

Baidu Pinyin Input Method is a Chinese pinyin input method software under Baidu. Baidu Pinyin Input Method suffers from a Dll hijacking vulnerability, which can be exploited by an attacker to load a malicious dll and execute arbitrary code...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2020/02/25 12:0 a.m.4 views

Sogou Input Method of Beijing Sogou Information Service Co.

Sogou Input Method is a Chinese character input method tool launched in June 2006 by Sogou Sogou. Sogou Input Method has a dll hijacking vulnerability, which can be exploited by attackers to remotely control a user's computer or implant a Trojan horse...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2020/02/25 12:0 a.m.2 views

Baidu Input Method of Beijing Baidu Netcom Technology Co. Ltd. suffers from dll hijacking vulnerability

Baidu Input Method is an input method that integrates handwriting, voice, win10, strokes, mouse handwriting and mobile input method. Ltd. Baidu Input Method has a dll hijacking vulnerability, which can be exploited by attackers to cause a user's computer to be remote controlled or implanted with ...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2020/02/18 12:0 a.m.4 views

Code Execution Vulnerability in QQ Pinyin Input Method Installer

QQ Pinyin Input Method is a Chinese pinyin input method software. A code execution vulnerability exists in the QQ Pinyin Input Method installer. It can be exploited by an attacker to execute arbitrary code...

8AI score
SaveExploits0
CNVD
CNVD
added 2020/02/13 12:0 a.m.5 views

Microsoft Windows IME Privilege Vulnerability

Microsoft Windows is a set of operating systems used for personal devices.Microsoft Windows Server is a set of server operating systems. An elevation of privilege vulnerability exists in Microsoft Windows IME, which arises from a program's failure to properly handle memory. An attacker could...

7.8CVSS7.1AI score0.00951EPSS
SaveExploits0References1
OSV
OSV
added 2020/02/11 10:15 p.m.6 views

CVE-2020-0707

An elevation of privilege vulnerability exists when the Windows IME improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows IME Elevation of Privilege Vulnerability'...

7.8CVSS7.2AI score0.00951EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/12/17 12:0 a.m.12 views

Unspecified Vulnerability in Tecno Camon

The Tecno Camon is a Camon series smartphone from the Chinese company Transocean. An unspecified vulnerability exists in Tecno Camon. The vulnerability can be exploited to execute code or commands with system privileges to record the screen, restore factory settings, obtain the user's Wi-Fi...

7.8CVSS7.4AI score0.00387EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/12/17 12:0 a.m.8 views

Unspecified Vulnerability in Tecno Camon iClick

The Transn Tecno Camon iClick is a smartphone from the Chinese company Transn. An unspecified vulnerability exists in Tecno Camon iClick. The vulnerability can be exploited to execute code or commands with system privileges to record the screen, restore factory settings, obtain the user's Wi-Fi...

7.8CVSS7.4AI score0.00387EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/12/17 12:0 a.m.7 views

Unspecified Vulnerability in Tecno Camon iClick (CNVD-2020-14790)

The Transn Tecno Camon iClick is a smartphone from the Chinese company Transn. An unspecified vulnerability exists in Tecno Camon iClick. The vulnerability can be exploited to execute code or commands with system privileges to record the screen, restore factory settings, obtain the user's Wi-Fi...

7.8CVSS7.4AI score0.00332EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/12/17 12:0 a.m.6 views

Unspecified Vulnerability in Tecno Camon (CNVD-2020-14795)

The Tecno Camon is a Camon series smartphone from the Chinese company Transocean. An unspecified vulnerability exists in Tecno Camon. The vulnerability can be exploited to execute code or commands with system privileges to record the screen, restore factory settings, obtain the user's Wi-Fi...

7.8CVSS7.4AI score0.00387EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/11/26 12:0 a.m.7 views

Sogou Pinyin Input Method Exploits DLL Hijacking Vulnerability

Sogou Pinyin Input Method is a Chinese character input method tool. A DLL hijacking vulnerability exists in Sogou Pinyin Input Method. An attacker can exploit this vulnerability to load a malicious dll and execute arbitrary code...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2019/11/26 12:0 a.m.5 views

QQ Pinyin Input Method Exploits DLL Hijacking Vulnerability

QQ Pinyin Input Method is a Chinese pinyin input method software. A DLL hijacking vulnerability exists in QQ Pinyin Input Method. An attacker can exploit this vulnerability to load a malicious dll and execute arbitrary code...

7.4AI score
SaveExploits0
OSV
OSV
added 2019/11/25 12:15 p.m.7 views

DEBIAN-CVE-2019-14822

A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is usi...

7.1CVSS6.8AI score0.00365EPSS
SaveExploits0References1
OSV
OSV
added 2019/11/25 12:15 p.m.22 views

CVE-2019-14822

A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is usi...

7.1CVSS6.2AI score
SaveExploits0References4
Prion
Prion
added 2019/11/25 12:15 p.m.27 views

Input validation

A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is usi...

3.6CVSS6.5AI score0.00365EPSS
SaveExploits0References4Affected Software4
Prion
Prion
added 2019/11/14 5:15 p.m.15 views

Input validation

The Tecno Camon iClick 2 Android device with a build fingerprint of TECNO/H622/TECNO-ID6:8.1.0/O11019/F-180824V116:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.11. This app contains an exported service...

7.2CVSS7.5AI score0.00387EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2019/11/14 4:24 p.m.30 views

CVE-2019-15348

The Tecno Camon Android device with a build fingerprint of TECNO/H612/TECNO-ID5a:8.1.0/O11019/F-180828V106:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.11. This app contains an exported service named...

7.6AI score0.00387EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2019/09/13 7:51 a.m.36 views

CVE-2019-14822

A flaw was discovered in ibus that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is using the graphical interface...

7.1CVSS2.9AI score0.00365EPSS
SaveExploits0References3
Rows per page
Query Builder