Memory Corruption Vulnerability in Polaris Office for windows (CNVD-2021-43943)

Polaris Office is an office suite compatible with MS Word, Excel, PowerPoint and Adobe PDF. A memory corruption vulnerability exists in Polaris Office windows version. An attacker could exploit this vulnerability to cause the program to crash...

Microsoft Windows Network File System 信息泄露漏洞

Microsoft Windows Network File System is a file sharing solution from Microsoft that allows you to transfer files between computers running Windows Server and UNIX operating systems using the NFS protocol. An information disclosure vulnerability exists in Microsoft Windows Network File System. Th...

SQL Injection Vulnerability in CloudLock Server-Side Windows Version

CloudLock is a free server security management software based on operating system kernel hardening technology, which supports cross-platform real-time, batch and remote security management of windows/linux servers. SQL injection vulnerability exists in the Windows version of CloudLock server...

Microsoft Windows WalletService 后置链接漏洞

Microsoft Windows WalletService is an application from Microsoft Corporation USA. that hosts objects used by the Wallet Client. A backlink vulnerability exists in Windows WalletService. The following products and versions are affected: Windows 10 Version 1803 for 32-bit Systems, Windows 10 Versio...

May 11, 2021-KB5001842 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1803

None None...

Trend Micro Password Manager may insecurely load Dynamic Link Libraries

Overview Password Manager provided by Trend Micro Incorporated contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact...

Remote code execution vulnerability in WeChat windows version

WeChat for windows is a cross-platform communication tool. A remote code execution vulnerability exists in WeChat for windows, which can be exploited by attackers to execute malicious code...

Unauthorized Access Vulnerability in Baidu.com Windows Version

Baidu.com is a cloud service product. An unauthorized access vulnerability exists in the Windows version of Baidu.com. An attacker can exploit the vulnerability by restarting Baidu.com to bypass the "lock" feature...

Gogs Git Hooks Remote Code Execution Exploit

This Metasploit module leverages an insecure setting to get remote code execution on the target OS in the context of the user running Gogs. This is possible when the current user is allowed to create git hooks, which is the default for administrative users. For non-administrative users, the...

Microsoft Windows Media Foundation 安全漏洞

Microsoft Windows Media Foundation is a multimedia development library from Microsoft that aims to provide a unified multimedia solution for the Windows platform, allowing developers to play video and sound files, encode audio and video, or transcode multimedia files. Developers can use Media...

Microsoft Windows User Profile Service 安全漏洞

Microsoft Windows User Profile Service is a service host from Microsoft Corporation USA that performs user profile loading and unloading operations, such as logging on logging in to Windows . A security vulnerability exists in Microsoft Windows User Profile Service. The following products and...

LodaRAT Windows Malware Now Also Targets Android Devices

A previously known Windows remote access Trojan RAT with credential-stealing capabilities has now expanded its scope to set its sights on users of Android devices to further the attacker's espionage motives. "The developers of LodaRAT have added Android as a targeted platform," Cisco Talos...

Intel Graphics Drivers 输入验证错误漏洞

Intel is an American company that develops CPUs and is the world's largest manufacturer of personal computer parts and CPUs. Intel® Graphics Drivers Integer Overflow Vulnerability, an integer overflow vulnerability in the firmware of some IntelR Graphics Drivers for Windows prior to version...

Ali Want Want windows new version has dll hijacking vulnerability

Aliwangwang is a personal transaction communication software customized for Taobao, which facilitates real-time communication between buyers and sellers in the transaction process. A dll hijacking vulnerability exists in the new version of Ali Want Want for Windows. Attackers can use the...

McAfee Agent Authorization Issues Vulnerability

The McAfee McAfee Agent MA is a set of client components from McAfee, Inc. that provides secure communications between ePolicy Orchestrator the antivirus management platform and managed products. A security vulnerability exists in McAfee Agent for Windows prior to 5.7.1, which stems from a lack o...

HBuilder windows version has dll hijacking vulnerability

HBuilder is a web development IDE that supports HTML5 from DCloud Digital Heaven. A dll hijacking vulnerability exists in HBuilder windows version. An attacker can exploit this vulnerability to execute malicious code...

January 12, 2021-KB4597249 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1803

None None...

Tencent TIM windows version has dll hijacking vulnerability

TIM is a concise version of QQ Office, a cross-platform communication tool under Tencent that focuses on team office collaboration. A dll hijacking vulnerability exists in Tencent TIM windows version. Attackers can use the vulnerability to load malicious dll and execute malicious code...

Homework Help Live Classes for windows has dll hijacking vulnerability

Homework Help Live Classes is a high-quality online live tutoring product under Homework Help, which covers all subjects of primary, junior high and senior high school grades. There is a dll hijacking vulnerability in the windows version of Homework Help Live Class. Attackers can use this...

Command Execution Vulnerability in Fanshawe Housing Management System Windows Version

Fanson Housing Management System is a free real estate agent management software. A command execution vulnerability exists in the Windows version of Fanshun Housing Management System, which can be exploited by an attacker to gain control of the server...