Vulnerabilidades en NAVER Corporation
7 resultadosAnálisis Vexday
A NAVER Corporation apresenta 7 vulnerabilidades catalogadas, nenhuma delas explorada ativamente ou classificada como crítica, com a fraqueza predominante em stack-based buffer overflow (CWE-121). O portfólio de risco está estabilizado, sem novas publicações nos últimos 90 dias, indicando uma exposição controlada e adequada para fins de priorização de remediação.
CVE-2019-13157—nsGreen.dll in Naver Vaccine 2.1.4 allows remote attackers to overwrite arbitary files via directory traversal sequences in a filename withiEPSS 1.7%CVE-2020-9752—Naver Cloud Explorer before 2.2.2.11 allows the attacker can move a local file in any path on the filesystem as a system privilege through iEPSS 1.1%CVE-2020-9753—Whale Browser Installer before 1.2.0.5 versions don't support signature verification for Flash installer.EPSS 1.1%CVE-2019-13156—NDrive(1.2.2).sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when readinEPSS 1.0%CVE-2018-12449—The Whale browser installer 0.4.3.0 and earlier versions allows DLL hijacking.EPSS 0.9%CVE-2018-12448—Whale Browser before 1.3.48.4 displays no URL information but only a title of a web page on the browser's address bar when visiting a non-htEPSS 0.8%CVE-2020-9751—Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the upEPSS 0.5%