Vulnerabilities fixed in Cisco AnyConnect Secure Mobility Client

Vulnerabilities have been fixed in Cisco AnyConnect Secure Mobility Client. The vulnerability with CVE attribute CVE-2021-1519 allows a local malicious person able to overwrite VPN profiles. The remaining vulnerabilities apply only to the Windows client, whereby a local malicious agent, by...

Denial of Service Vulnerability in Lovecraft Windows Client

Aikiye is an online video website founded on April 22, 2010 by Gong Yu. A denial-of-service vulnerability exists in the AikiYi Windows client, which can be exploited by attackers to cause a denial-of-service attack...

Denial of Service Vulnerability in Lovecraft Windows Client (CNVD-2021-30533)

Aikiye is an online video website founded on April 22, 2010 by Gong Yu. A denial-of-service vulnerability exists in the AikiYi Windows client, which can be exploited by attackers to cause a denial-of-service attack...

Tencent video windows client has denial of service vulnerability

Tencent Video, launched in April 2011, is an online video platform with popular content and professional media operation capabilities. It is a comprehensive video content platform that aggregates hot movies and TV shows, variety shows and entertainment, sports events, news and information, etc.,...

CVE-2021-27192

Local privilege escalation vulnerability in Windows clients of Netop Vision Pro up to and including 9.7.1 allows a local user to gain administrator privileges whilst using the clients...

Vulnerability fixed in Cisco Anyconnect Client

Cisco has fixed a vulnerability in the Anyconnect client for Windows. A local, authenticated malicious party could exploit the exploit the vulnerability to perform a DLL hijack and thus potentially execute arbitrary code under SYSTEM privileges. Cisco has released updates to fix the vulnerability...

Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability (cisco-sa-anyconnect-dll-hijac-JrcTOQMC)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the cisco-sa-anyconnect-dll-hijac-JrcTOQMC advisory. - A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure...

CVE-2021-3176

The chat window of the Mitel BusinessCTI Enterprise MBC-E Client for Windows before 6.4.15 and 7.x before 7.1.2 could allow an attacker to gain access to user information by sending certain code, due to improper input validation of http links. A successful exploit could allow an attacker to view...

CVE-2021-3176

The chat window of the Mitel BusinessCTI Enterprise MBC-E Client for Windows before 6.4.15 and 7.x before 7.1.2 could allow an attacker to gain access to user information by sending certain code, due to improper input validation of http links. A successful exploit could allow an attacker to view...

Himalaya (Windows client) suffers from a dll hijacking vulnerability (CNVD-2021-12678)

Himalaya is a professional audio sharing platform. A dll hijacking vulnerability exists in Himalaya Windows client, which can be exploited by an attacker to cause execution of arbitrary malicious code...

The vulnerabilities of the Network Access Manager and Web Security Agent components of the Cisco AnyConnect Secure Mobility Client cryptographic security tool for Windows allow a perpetrator to execute arbitrary code.

The vulnerability of the Network Access Manager and Web Security Agent components of the Cisco AnyConnect Secure Mobility Client cryptographic security solution for Windows is related to an uncontrolled element in the search path. Exploiting this vulnerability could allow a attacker to execute...

Flying Book (Windows client) suffers from a dll hijacking vulnerability (CNVD-2021-13582)

Flybook deeply integrates instant communication, calendar, audio/video conferencing, cloud documents, cloud disk, mailbox and workbench, and through the open and compatible platform, members can realize efficient communication and smooth collaboration in one place, and improve the efficiency of...

Himalaya (Windows client) suffers from a dll hijacking vulnerability (CNVD-2021-10374)

Himalaya is a professional audio sharing platform. A dll hijacking vulnerability exists in Himalaya Windows client, which can be exploited by attackers to execute arbitrary malicious code via the client...

Himalaya (Windows client) suffers from a dll hijacking vulnerability (CNVD-2021-10375)

Himalaya is a professional audio sharing platform. A dll hijacking vulnerability exists in Himalaya Windows client, which can be exploited by attackers to execute arbitrary malicious code via the client...

Himalaya (Windows client) suffers from a dll hijacking vulnerability (CNVD-2021-10376)

Himalaya is a professional audio sharing platform. A dll hijacking vulnerability exists in Himalaya Windows client, which can be exploited by attackers to execute arbitrary malicious code via the client...

Himalaya (Windows client) suffers from dll hijacking vulnerability

Himalaya is a professional audio sharing platform. A dll hijacking vulnerability exists in Himalaya Windows client, which can be exploited by attackers to execute arbitrary malicious code via the client...

FlyChat windows client suffers from dll hijacking vulnerability

FlyChat is a fun social software. A dll hijacking vulnerability exists in the FlyChat windows client. An attacker can exploit the vulnerability to load malicious dlls and execute malicious code...

Flying Book (Windows client) suffers from a dll hijacking vulnerability (CNVD-2021-09688)

Flybook is an enterprise collaboration platform. A dll hijacking vulnerability exists in Flying Book Windows client, which can be exploited by an attacker to gain control of the server...

Raiden Emulator (Windows client) suffers from a dll hijacking vulnerability (CNVD-2021-05553)

Thunderbolt Emulator is a free Android emulator. Raiden Emulator Windows client suffers from a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

Microsoft Windows CSC Service Security Vulnerability

Microsoft Windows CSC Service is an application from Microsoft USA. It allows the use of network files while the local computer is offline. A security vulnerability exists in Microsoft Windows CSC Service. The following products and versions are affected:Windows Server 2012 R2 Server Core...