Lucene search
K

172 matches found

RedhatCVE
RedhatCVE
added yesterday2 views

CVE-2026-8148

NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipulation due to improper privilege checks...

7.8CVSS5.4AI score0.00013EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/08 6:32 a.m.3 views

EUVD-2026-28530

NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipulation due to improper privilege checks...

7.8CVSS5.7AI score0.00013EPSS
Exploits0References2
NVD
NVD
added 2026/05/08 5:16 a.m.6 views

CVE-2026-8148

NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipulation due to improper privilege checks...

7.8CVSS0.00013EPSS
Exploits0References1
CVE
CVE
added 2026/05/08 4:36 a.m.8 views

CVE-2026-8148

NAVER MYBOX Explorer for Windows before 3.0.11.160 is affected by a local privilege escalation vulnerability. The root cause is improper privilege checks that permit a local attacker to manipulate the registry to gain NT AUTHORITY\SYSTEM privileges. The CVE entry for CVE-2026-8148 documents a HIG...

7.8CVSS5.7AI score0.00013EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/05/08 4:36 a.m.31 views

CVE-2026-8148

NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipulation due to improper privilege checks...

0.00013EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/08 4:36 a.m.4 views

CVE-2026-8148

NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipulation due to improper privilege checks...

5.7AI score0.00013EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/08 4:36 a.m.3 views

CVE-2026-8148

NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipulation due to improper privilege checks...

5.7AI score0.00013EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/08 12:0 a.m.5 views

PT-2026-38666

Name of the Vulnerable Software and Affected Versions NAVER MYBOX Explorer for Windows versions prior to 3.0.11.160 Description Improper privilege checks allow a local attacker to escalate privileges to NT AUTHORITYSYSTEM through registry manipulation. Recommendations Update to version 3.0.11.160...

7.8CVSS5.8AI score0.00013EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/05/08 12:0 a.m.3 views

NAVER MYBOX Explorer for Windows 安全漏洞

NAVER MYBOX Explorer for Windows is a software developed by South Korea's NAVER MYBOX company, used for managing cloud storage. Versions of NAVER MYBOX Explorer for Windows prior to version 3.0.11.160 contained security vulnerabilities. These vulnerabilities were due to improper permission checks...

7.8CVSS5.8AI score0.00013EPSS
Exploits0References1
OSV
OSV
added 2026/02/14 11:42 p.m.2 views

CLSA-2026-1771112524 Update of alt-php

Update ca-certificates database to 20260129: - mozilla\certdata.h,nssckbi.h: Update Mozilla certificate authority bundle of the version 2.82. - The following certificates were updated: Certificate "GlobalSign Root CA" Certificate "Entrust.net Premium 2048 Secure Server CA" Certificate "Comodo AAA...

5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2026/01/16 12:0 a.m.1 views

Lucy-XSS security vulnerability

Lucy-XSS is a cross-site scripting protection library open-sourced by NAVER. Lucy-XSS has a security vulnerability, which stems from improper configuration of the default super-set rule file, leading to inadequate cleanup and potentially allowing malicious JavaScript to be executed...

6.5CVSS5.6AI score0.00016EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/16 12:0 a.m.1 views

Lucy-XSS security vulnerability

Lucy-XSS is an open-source cross-site scripting protection library developed by NAVER. Lucy-XSS has a security vulnerability that occurs when the ObjectSecurityListener or EmbedSecurityListener option is enabled, and the src attribute lacks a file extension. This vulnerability may lead to a HEAD...

6.1CVSS5.6AI score0.00019EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2026/01/09 11:28 a.m.5 views

CVE-2021-33592

NAVER Toolbar before 4.0.30.323 allows remote attackers to execute arbitrary code via a crafted upgrade.xml file. Special characters in filename parameter can be the cause of bypassing code signing check function...

9.8CVSS7.9AI score0.01044EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:26 a.m.4 views

CVE-2021-33591

An exposed remote debugging port in Naver Comic Viewer prior to 1.0.15.0 allowed a remote attacker to execute arbitrary code via a crafted HTML page...

8.8CVSS7.6AI score0.00862EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.1 views

Naver Whale Browser 安全漏洞

Naver Whale Browser is a web browser from Naver, a South Korean company that supports user-defined interfaces. A security vulnerability exists in Naver Whale Browser versions prior to 4.35.351.12, which stems from a same-origin policy bypass in the sidebar environment...

7.5CVSS5.8AI score0.0002EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.1 views

Naver Whale Browser 安全漏洞

Naver Whale Browser is a web browser from Naver, a Korean company that supports user-defined interfaces. A security vulnerability exists in Naver Whale Browser versions prior to 4.35.351.12, which originates from an iframe sandbox escape in the sidebar environment...

9.1CVSS5.8AI score0.00044EPSS
Exploits0References1
OSV
OSV
added 2025/11/24 1:38 p.m.2 views

MAL-2025-190711 Malicious code in @actbase/react-native-naver-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b3259789ec3c0e90767b9f76d1f7d825f89fba1d5810692ec87ae4567f698e The package @actbase/react-native-naver-login was found to contain malicious code. Source: ghsa-malware...

6.8AI score
Exploits0References4
EUVD
EUVD
added 2025/11/24 1:38 p.m.3 views

EUVD-2025-198780

Malicious code in @actbase/react-native-naver-login npm...

6.6AI score
Exploits0References1
CNNVD
CNNVD
added 2025/10/16 12:0 a.m.2 views

Naver Whale Browser 安全漏洞

Naver Whale Browser is a web browser from Naver, a South Korean company that supports user-defined interfaces. A security vulnerability exists in Naver Whale Browser versions prior to 4.33.325.17, which originates from an attacker being able to bypass the same-origin policy in a two-tab environme...

7.5CVSS6.6AI score0.00021EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/16 12:0 a.m.1 views

Naver Whale Browser 安全漏洞

Naver Whale Browser is a web browser from Naver, a South Korean company that supports user-defined interfaces. A security vulnerability exists in Naver Whale Browser versions prior to 4.33.325.17, which stems from a specific scheme that can bypass content security policies...

7.5CVSS6.6AI score0.00036EPSS
Exploits0References1
Rows per page
Query Builder