7322 matches found
AnyBurn 安全漏洞
AnyBurn is a disc burning and image processing tool developed by AnyBurn Corporation. The AnyBurn 4.3 x86 version contains a security vulnerability. This vulnerability stems from a denial-of-service vulnerability in the image conversion function, which could allow local attackers to cause the...
EUVD-2016-10865
Netgate AMITI Antivirus build 23.0.305 contains an unquoted service path vulnerability in the AmitiAvSrv and AmitiAntivirusHealth services that allows local attackers to escalate privileges. Attackers can place a malicious executable in the unquoted service path and trigger service restart or...
EUVD-2016-10869
Hotspot Shield 6.0.3 contains an unquoted service path vulnerability in the hshld service binary that allows local attackers to escalate privileges by injecting malicious executables. Attackers can place executable files in the service path and upon service restart or system reboot, the malicious...
EUVD-2018-21756
FTP Voyager 16.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by injecting oversized buffer data into the site profile IP field. Attackers can create a malicious site profile containing 500 bytes of repeated characters and paste it into the IP...
EUVD-2016-10863
Spy Emergency build 23.0.205 contains an unquoted service path vulnerability in the SpyEmrgHealth and SpyEmrgSrv services that allows local attackers to escalate privileges by inserting malicious executables. Attackers can place executable files in the unquoted service path and trigger service...
CVE-2016-20057
NETGATE Registry Cleaner build 16.0.205 contains an unquoted service path vulnerability in the NGRegClnSrv service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the unquoted path and trigger service restart ...
CVE-2018-25244 Eco Search 1.0.2.0 Denial of Service
Eco Search 1.0.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 950 or more characters into the search bar and trigger a crash by initiating a...
CVE-2018-25244
The CVE-2018-25244 entry affects Microsoft Eco Search 1.0.2.0. A denial-of-service condition arises when an attacker with local access submits an excessively long string (buffer of ≥950 characters) in the search functionality, triggering a crash. Both CVSS-derived metrics indicate LOCAL attack v...
CVE-2018-25239
Microsoft Smart VPN 1.1.3.0 is affected by a local denial-of-service vulnerability: an oversized input (about 2100 characters) in the top-right search bar causes an unhandled exception and crashes the application. CVSS metrics indicate CVSS v3.1: base score 6.2 (Medium) with availability impact; ...
CVE-2018-25240
Microsoft Watchr 1.1.0.0 is affected by a local denial-of-service vulnerability in its search feature: submitting an excessively long string (about 8,145 characters) can crash the application. The issue stems from input handling in the search function, enabling a local attacker to trigger a crash...
CVE-2018-25238 VSCO 1.1.1.0 Denial of Service via Search
VSCO 1.1.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string through the search functionality. Attackers can paste a buffer of 5000 characters into the search bar and navigate back to trigger an application...
CVE-2016-20061
Summary: CVE-2016-20061 affects sheed AntiVirus 2.3, exploiting an unquoted service path in the ShavProt service to escalate privileges. An attacker can place a malicious executable in the unquoted binary path, triggering the service to restart or the system reboot to execute code with LocalSyste...
CVE-2016-20061 sheed AntiVirus 2.3 Unquoted Service Path Privilege Escalation
sheed AntiVirus 2.3 contains an unquoted service path vulnerability in the ShavProt service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can insert a malicious executable in the unquoted path and trigger service restart or system reboot to...
CVE-2016-20056 Spy Emergency build 23.0.205 Unquoted Service Path Privilege Escalation
Spy Emergency build 23.0.205 contains an unquoted service path vulnerability in the SpyEmrgHealth and SpyEmrgSrv services that allows local attackers to escalate privileges by inserting malicious executables. Attackers can place executable files in the unquoted service path and trigger service...
CVE-2016-20055 IObit Advanced SystemCare 10.0.2 Unquoted Service Path Privilege Escalation
IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability in the AdvancedSystemCareService10 service that allows local attackers to escalate privileges. Attackers can place a malicious executable in the service path and trigger privilege escalation when the service restarts...
CVE-2016-20050
NetSchedScan 1.0 contains a buffer overflow vulnerability in the scan Hostname/IP field that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a crafted payload containing 388 bytes of data followed by 4 bytes of EIP overwrite into the...
Foundstone NetSchedScan 缓冲区错误漏洞
Foundstone NetSchedScan is a scanning tool developed by Foundstone Inc. Version 1.0 of Foundstone NetSchedScan contains a buffer error vulnerability. This vulnerability stems from a buffer overflow in the host name/IP field during scanning, which could allow local attackers to cause the applicati...
PT-2026-30365
Microsoft Eco Search 1.0.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 950 or more characters into the search bar and trigger a crash by...
Smart VPN 安全漏洞
Smart VPN is a proxy software developed by Smart VPN Inc. Version 1.1.3.0 of Smart VPN contains a security vulnerability. This vulnerability arises from the search interface’s improper handling of extremely large inputs, which may allow local attackers to cause the application to crash by...
PT-2026-30373
Termite 3.4 contains a buffer overflow vulnerability in the User interface language settings field that allows local attackers to cause a denial of service by supplying an excessively long string. Attackers can paste a 2000-byte payload into the Settings User interface language field to crash the...