31 matches found
CVE-2021-20334
CVE-2021-20334 is a local privilege escalation affecting MongoDB Compass on Windows. A malicious third party with local access can execute arbitrary software with the privileges of the user running MongoDB Compass. Affected products include MongoDB Compass 1.x (starting with 1.3.0 on Windows) and...
Arbitrary Code Execution
adplug is vulnerable to arbitrary code execution. A double free in the Cu6mPlayer class in u6m.h could potentailly allow an attacker to execute arbitrary code on the host OS...
OSV-2020-440 UNKNOWN READ in r_uleb128
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13915 Crash type: UNKNOWN READ Crash state: ruleb128 parseclass dexloadcode...
The vulnerability of the Endpoint Security Initial Client for Windows clients involves a lack of mechanisms for secure loading of DLL libraries, allowing attackers to exploit their privileges.
The vulnerability of Endpoint Security Initial Client for Windows involves a lack of a secure loading mechanism for DLL libraries. Exploiting this vulnerability allows an attacker to enhance their privileges by executing malicious software...
CVE-2017-17023
The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering www.ncp-e.com. The affected client software, "Sophos IPSec Client" 11.04 is a rebranded version of NCP "Secure Entry Client" 10.11 r32792. A vulnerability in the software update feature of the VPN client allows...
CVE-2017-17023
The Sophos UTM VPN endpoint interacts with client software provided by NPC Engineering www.ncp-e.com. The affected client software, "Sophos IPSec Client" 11.04 is a rebranded version of NCP "Secure Entry Client" 10.11 r32792. A vulnerability in the software update feature of the VPN client allows...
CVE-2017-7526
libgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a complete break of RSA-1024 while using the left-to-right method for computing the sliding-window expansion. The same attack is believed to work on RSA-2048 with moderately more computation. This...
Microsoft Windows Vista Internet Explorer applications execution
By clicking the link to the local file with the same name as local folder, file is executed...
Microsoft Internet Explorer 5 - XML Page Object Type Validation (MS03-040)
source: https://www.securityfocus.com/bid/8565/info Internet Explorer does not properly handle object types, when rendering XML based web sites. This may result in the possibility of the execution of malicious software. The problem occurs when Internet Explorer receives a response from the server...