CVE-2020-5147

SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privileges in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 10.2.300 and earlier...

CVE-2020-5147

CVE-2020-5147 affects SonicWall NetExtender Windows client (version 10.2.300 and earlier). The root cause is an unquoted service path, enabling a local attacker to gain elevated privileges on the host. The CVE description in multiple sources confirms the vulnerable component as the NetExtender Wi...

CVE-2020-5147

SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to gain elevated privileges in the host operating system. This vulnerability impact SonicWall NetExtender Windows client version 10.2.300 and earlier...

Sonicwall SonicWall NetExtender Windows client Code Issue Vulnerability

Sonicwall NetExtender Windows client is a Windows-based SSL VPN Virtual Private Network client application from Sonicwall, Inc. A security vulnerability exists in SonicWall NetExtender Windows client version 10.2.300 and earlier, the source of which allows a local attacker to gain elevated...

Flying Book (Windows client) suffers from a dll hijacking vulnerability

Flybook deeply integrates instant communication, calendar, audio/video conferencing, cloud documents, cloud disk, mailbox and workbench, and through the open and compatible platform, members can realize efficient communication and smooth collaboration in one place, and improve the efficiency of...

YY Voice (Windows client) suffers from dll hijacking vulnerability

YY Voice is a team voice communication platform. A dll hijacking vulnerability exists in YY Voice Windows client. An attacker can exploit this vulnerability to execute malicious code...

Extreme PDF Reader (Windows Client) has a dll hijacking vulnerability

Extreme PDF Reader is a PDF reader. Extreme PDF Reader Windows client has a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

Denial of Service Vulnerability in Time Stamp (Windows Client)

Time Stamp is a fast, high-definition, ad-free image viewing software, compatible with all major image formats:JPG\PNG\GIF\BMP, etc; A denial of service vulnerability exists in Time Stamp Windows client, which can be exploited by an attacker to cause the software to crash via the poc...

Denial of Service Vulnerability in Time Stamp (Windows Client) (CNVD-2020-75029)

Time Stamp is a fast, high-definition, ad-free image viewing software, compatible with all major image formats:JPG\PNG\GIF\BMP, etc; A denial of service vulnerability exists in Time Stamp Windows client, which can be exploited by an attacker to cause the software to crash via the poc...

Elevation of Privilege Vulnerability in the Windows Client of Night God Emulator

Night God Emulator is a completely free software. An elevation of privilege vulnerability exists in the Windows client of NightGod Emulator, which can be exploited by an attacker to gain control of the server...

Security Bulletin: Security vulnerability in IBM Java SDK affecting Rational Synergy (CVE-2019-4732)

Summary There is a security vulnerability in IBM® SDK Java™ Technology Edition, Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55 used by Rational Synergy versions 7.2.1.0 to 7.2.1.7. Rational Synergy has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-4732...

Format Factory (Windows client) suffers from a dll hijacking vulnerability

Format Factory is a free multifunctional multimedia format conversion software. A dll hijacking vulnerability exists in Format Factory Windows client. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

CVE-2020-27154

The chat window of Mitel BusinessCTI Enterprise MBC-E Client for Windows before 6.4.11 and 7.x before 7.0.3 could allow an attacker to gain access to user information by sending arbitrary code, due to improper input validation. A successful exploit could allow an attacker to view the user...

Mitel BusinessCTI Enterprise Client Input Validation Error Vulnerability

Mitel Networks BusinessCTI Enterprise is an employee communication software for attendance management and instant messaging from Mitel Networks Canada. An input validation error vulnerability exists in the Windows-based Mitel BusinessCTI Enterprise MBC-E Client Chat Window versions prior to 6.4.1...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM ILOG CPLEX Optimization Studio

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by IBM CPLEX Optimization Studio. IBM CPLEX Optimization Studio has addressed the applicable CVEs. Vulnerability Details If you run your own Java code using the IBM Java Runtime delivered with this product...

Sogou Input Method (Windows client) suffers from dll hijacking vulnerability

Sogou Input Method is a Chinese character input method tool launched in June 2006 by Sogou Sogou. A dll hijacking vulnerability exists in Sogou Input Method Windows client. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

NetEase Mail Master (Windows client) suffers from dll hijacking vulnerability (CNVD-2020-75299)

Netease Mailbox Master is an all-platform mailbox client launched by Netease Netease, which supports the use of various brands of mailboxes such as Netease and Outlook, and supports the login of all platform devices. A dll hijacking vulnerability exists in Netease Mail Master Windows client. An...

Qiyou Gaming Accelerator (Windows Client) has dll hijacking vulnerability

Qiyou Gaming Accelerator is a professional gaming-grade online game gas pedal. A dll hijacking vulnerability exists in Qiyou Gaming Accelerator Windows client. An attacker can exploit this vulnerability to execute malicious code...

There is a dll hijacking vulnerability in Youdao Cloud Notes (Windows client)

Youdao Cloud Notes 原有道笔记 is an online library for individuals and teams launched on June 28, 2011 by NetEase's Youdao. A dll hijacking vulnerability exists in Youdao Cloud Notes Windows client. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

Binary Vulnerability in Tencent QQ Music Windows Client

QQ Music for PC is a free music player, QQ Music for PC provides users with the latest and hottest song resources and music videos for free. A DLL hijacking vulnerability exists in the Tencent QQ Music Windows client, which can be exploited by attackers to gain control of the server...