2274 matches found
CVE-2020-27586
CVE-2020-27586 affects Quick Heal Total Security before version 19.0, where quarantine and system information files are transmitted in clear text. The connected documents corroborate the product/version and the data exposed (quarantine and sysinfo) but do not provide detailed root cause, affected...
CVE-2020-27586
Quick Heal Total Security before version 19.0 transmits quarantine and sysinfo files via clear text...
CVE-2020-27585
CVE-2020-27585 affects Quick Heal Total Security prior to 19.0. The issue allows an attacker with local administrator rights to modify sensitive antivirus settings by brute-forcing the settings password. This is a local-privilege scenario (attack vector: LOCAL, authentication: NONE, impact: HIGH ...
K7 Computing Quick Heal Total Security Security Vulnerability
K7 Computing Total Security is a suite of antivirus software for the Windows platform from K7 Computing, USA. A security vulnerability exists in Quick Heal Total Security prior to version 19.0, which stems from a vulnerability that allows an attacker to exploit the vulnerability with local...
K7 Computing Quick Heal Total Security Security Vulnerability
K7 Computing Total Security is a suite of antivirus software for the Windows platform from K7 Computing, USA. A security vulnerability exists in Quick Heal Total Security versions prior to 19.0, which can be exploited by an attacker with local administrative privileges to modify sensitive antivir...
K7 Computing Total Security Security Vulnerabilities
K7 Computing Total Security is a suite of antivirus software for the Windows platform from K7 Computing, USA. A security vulnerability exists in versions prior to Quick Heal Total Security 19.0 that stems from the security of the sysinfo file through the explicit text ex...
total-healthgym.com Cross Site Scripting vulnerability OBB-1480123
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
W3 Total Cache Plugin for WordPress < 0.9.5 Server-Side Request Forgery
The WordPress W3 Total Cache Plugin installed on the remote host is affected by a server-side request forgery SSRF vulnerability due to improper sanitization of user-supplied input. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reporte...
Ghisler Total Commander Elevation of Privilege Vulnerability
Ghisler Total Commander is a file manager software from the American company Ghisler. The program offers file compression, management, ftp sharing and more. An elevation of privilege vulnerability exists in Ghisler Total Commander version 9.51, which stems from insufficient access restrictions in...
Vulnerability in Ghisler Total Commander
There is a vulnerability in Ghisler Total Commander. The vulnerability allows a local malicious person to obtain elevated permissions by replacing the Total Commander binary. The developers of Total Commander have indicated that they will not fix the vulnerability will not be fixed. According to...
CVE-2020-17381
An issue was discovered in Ghisler Total Commander 9.51. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the %SYSTEMDRIVE%\totalcmd\TOTALCMD64.EXE binary...
CVE-2020-17381
An issue was discovered in Ghisler Total Commander 9.51. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the %SYSTEMDRIVE%\totalcmd\TOTALCMD64.EXE binary...
Design/Logic Flaw
An issue was discovered in Ghisler Total Commander 9.51. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the %SYSTEMDRIVE%\totalcmd\TOTALCMD64.EXE binary...
PT-2020-14933 · Ghisler · Total Commander
Name of the Vulnerable Software and Affected Versions: Ghisler Total Commander version 9.51 Description: An issue was discovered due to insufficient access restrictions in the default installation directory, allowing an attacker to elevate privileges by replacing the...
CVE-2020-17381
The CVE-2020-17381 entry concerns Ghisler Total Commander 9.51. The issue is a local privilege escalation caused by insufficient access restrictions in the default installation directory, enabling an attacker to replace the TOTALCMD64.EXE binary under %SYSTEMDRIVE% (Total Commander directory) to ...
CVE-2020-17381
An issue was discovered in Ghisler Total Commander 9.51. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the %SYSTEMDRIVE%\totalcmd\TOTALCMD64.EXE binary...
McAfee Total Protection elevation of privilege vulnerability (CNVD-2020-64597)
McAfee Total Protection MTP is a suite of antivirus software from the American company McAfee. An elevation of privilege vulnerability exists in McAfee Total Protection versions prior to 4.0.176.1, which originates from allowing a local user to schedule a task that invokes malware to execute with...
CVE-2020-7330
Privilege Escalation vulnerability in McAfee Total Protection MTP trial prior to 4.0.176.1 allows local users to schedule tasks which call malicious software to execute with elevated privileges via editing of environment variables...
CVE-2020-7330
Privilege Escalation vulnerability in McAfee Total Protection MTP trial prior to 4.0.176.1 allows local users to schedule tasks which call malicious software to execute with elevated privileges via editing of environment variables...
Privilege escalation
Privilege Escalation vulnerability in McAfee Total Protection MTP trial prior to 4.0.176.1 allows local users to schedule tasks which call malicious software to execute with elevated privileges via editing of environment variables...