322 matches found
CVE-2022-45697
Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory...
Razer Central 后置链接漏洞
Razer Central is the peripheral control center for Razer USA. A security vulnerability exists in versions prior to Razer Central v7.8.0.381, which stems from an arbitrary file deletion vulnerability found when working with files in the account directory...
CVE-2022-45697
Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory...
Razer Synapse 3.7.0731.072516 Local Privilege Escalation Vulnerability
Product: Razer Synapse Manufacturer: Razer Inc. Affected Versions: Versions before 3.7.0830.081906 Tested Versions: 3.7.0731.072516 Vulnerability Type: Improper Certificate Validation CWE-295 Risk Level: High Solution Status: Open Manufacturer Notification: 2022-08-02 Solution Date: 2022-09-06...
CVE-2022-47632
Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege management, and improper certificate validation. Attackers can place malicious DLLs into %PROGRAMDATA%\Razer\Synapse3\Service\bin if they do so before the service is installed a...
CVE-2022-47632
Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege management, and improper certificate validation. Attackers can place malicious DLLs into %PROGRAMDATA%\Razer\Synapse3\Service\bin if they do so before the service is installed a...
Privilege escalation
Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege management, and improper certificate validation. Attackers can place malicious DLLs into %PROGRAMDATA%\Razer\Synapse3\Service\bin if they do so before the service is installed a...
Razer Synapse 3.7.0731.072516 Local Privilege Escalation
Advisory ID: SYSS-2022-047 Product: Razer Synapse Manufacturer: Razer Inc. Affected Versions: Versions before 3.7.0830.081906 Tested Versions: 3.7.0731.072516 Vulnerability Type: Improper Certificate Validation CWE-295 Risk Level: High Solution Status: Open Manufacturer Notification: 2022-08-02...
Razer Synapse 代码问题漏洞
Razer Synapse is an application from Razer, Inc. designed to configure and customize Razer's line of hardware. A security vulnerability exists in versions prior to Razer Synapse 3.7.0830.081906 that stems from its insecure installation path, improper privilege management, and improper certificate...
CVE-2022-47632
CVE-2022-47632 affects Razer Synapse pre-3.7.0830.081906. The vulnerability stems from an unsafe installation path, improper privilege management, and improper certificate validation that enables DLL hijacking via a malicious DLL placed in %PROGRAMDATA%\Razer\Synapse3\Service\bin before the servi...
CVE-2022-47632
Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege management, and improper certificate validation. Attackers can place malicious DLLs into %PROGRAMDATA%\Razer\Synapse3\Service\bin if they do so before the service is installed a...
CVE-2022-47632
Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege management, and improper certificate validation. Attackers can place malicious DLLs into %PROGRAMDATA%\Razer\Synapse3\Service\bin if they do so before the service is installed a...
PT-2023-12790 · Razer +3 · Razer +3
Name of the Vulnerable Software and Affected Versions: Razer affected versions not specified EVGA affected versions not specified MSI affected versions not specified AMI affected versions not specified Description: The issue concerns multiple Time-of-Check-to-Time-of-Use TOCTOU vulnerabilities in...
Razer Sila Gaming Router Command Injection (CVE-2022-29013)
A command injection vulnerability exists in Razer Sila gaming router. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Razer Synapse 安全漏洞
Razer Synapse is an application from Razer, Inc. designed to configure and customize Razer's line of hardware. A security vulnerability exists in Razer Synapse. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's announcement...
Malicious code in razer-xdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 540be53be94e75262dc95e2abd0261bd691952d1b5efe267b276014d071217e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5597 Malicious code in razer-xdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 540be53be94e75262dc95e2abd0261bd691952d1b5efe267b276014d071217e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview razer-xdk is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
