801 matches found
Himalaya (Windows client) suffers from dll hijacking vulnerability
Himalaya is an audio sharing platform. A dll hijacking vulnerability exists in Himalaya Windows client, which can be exploited by an attacker to load a malicious dll and execute malicious code...
Shrimp Music (Windows client) suffers from a dll hijacking vulnerability
Shrimp Music is a professional music content discovery and consumption platform. A dll hijacking vulnerability exists in Shrimp Music Windows client. An attacker can exploit this vulnerability to execute malicious code...
CentOS 7 : qt5-qtbase (RHSA-2020:4025)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4025 advisory. - Out of bounds write in IntelR PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of service via...
Hochen CAD 2021 (Windows Client) suffers from dll hijacking vulnerability
Hochen CAD 2021 is a 3D design assistance software. A dll hijacking vulnerability exists in Hao Chen CAD 2021 Windows client. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...
RHEL 7 : qt5-qtbase (RHSA-2020:4025)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4025 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt...
Oracle Linux 8 : qt5-qtbase / and / qt5-qtwebsockets (ELSA-2020-4690)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4690 advisory. qt5-qtbase 5.12.5-6 - OpenSSL: handle SSLshutdowns errors properly Resolves: bz1851538 5.12.5-5 - Fix: Files placed by attacker can influence the worki...
qt5-qtbase and qt5-qtwebsockets security and bug fix update
qt5-qtbase 5.12.5-6 - OpenSSL: handle SSLshutdowns errors properly Resolves: bz1851538 5.12.5-5 - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution Resolves: bz1814739 Resolves: bz1814683 - Fix: XML entity expansion vulnerability Resolves:...
Moderate: Red Hat Security Advisory: qt5-qtbase and qt5-qtwebsockets security and bug fix update
An update for qt5-qtbase, qt5-qttools, and qt5-qtwebsockets is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
RLSA-2020:4690 Moderate: qt5-qtbase and qt5-qtwebsockets security and bug fix update
Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fixes: qt: XML entity expansion vulnerability CVE-2015-9541 qt5-qtwebsockets: websocket implementation allows only limited size for frames and...
DLL Hijacking Vulnerability in Haiwell's Cloud SCADA Cloud Configuration Software
Haiwell Haiwell cloud configuration software Cloud SCADA is an industrial automation monitoring and management platform software developed by Xiamen Haiwell Technology Co. A DLL hijacking vulnerability exists in Haiwell Cloud SCADA. An attacker can exploit this vulnerability to load a malicious d...
CVE-2020-7327: Authentication Bypass by Spoofing
Improperly implemented security check in McAfee MVISION Endpoint Detection and Response Client MVEDR prior to 3.2.0 may allow local administrators to execute malicious code via stopping a core Windows service leaving McAfee core trust component in an inconsistent state resulting in MVEDR failing...
PT-2020-19556
Name of the Vulnerable Software and Affected Versions McAfee MVISION Endpoint Detection and Response Client versions prior to 3.2.0 Description The issue is related to an improperly implemented security check. This may allow local administrators to execute malicious code by stopping a core Window...
qt5-qtbase security update
5.9.7-4 - Fix: Files placed by attacker can influence the working directory and lead to malicious code execution Resolves: bz1814740 Resolves: bz1814685 5.9.7-3 - Fix multilib issue with qtcore-config.h header file Resolves: bz1534528 - Move libQt5EglFSDeviceIntegration lib into correct subpackag...
Privilege Escalation
Qt is vulnerable to Privilege Escalation. Files placed by attacker can influence the working directory and lead to malicious code execution...
Moderate: Red Hat Security Advisory: qt5-qtbase security update
An update for qt5-qtbase is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
CVE-2020-3980: Undefined Security Weakness
VMware Fusion 11.x contains a privilege escalation vulnerability due to the way it allows configuring the system wide path. An attacker with normal user privileges may exploit this issue to trick an admin user into executing malicious code on the system where Fusion is installed...
PT-2020-3954
Name of the Vulnerable Software and Affected Versions: VMware Fusion versions 11.x Description: The issue is related to a privilege escalation vulnerability due to the way VMware Fusion configures the system-wide path. An attacker with normal user privileges may exploit this issue to trick an adm...
Extreme Online Game Accelerator has a dll hijacking vulnerability
Extreme Online Game Accelerator is a game gas pedal software. Extreme Online Game Accelerator has a dll hijacking vulnerability. An attacker can exploit this vulnerability to execute malicious code...
CVE-2019-3881: Uncontrolled Search Path Element
Bundler prior to 2.1.0 uses a predictable path in /tmp/, created with insecure permissions as a storage location for gems, if locations under the user's home directory are not available. If Bundler is used in a scenario where the user does not have a writable home directory, an attacker could pla...
