← Back

Navercorp

navercorp

22 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Whale
whale
Mybox
mybox

CVEs (22)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Navercorp
1Whale
Nov 21, 2024
Jun 16, 2018
N/A· v4
8.1 HIGH· v3
5.1 MEDIUM· v2
The path of Whale update service was unquoted in NAVER Whale before 1.0.40.7. This vulnerability can be used for persistent privilege escalation if it's available to create an executable file with System privilege by oth...Show more
The path of Whale update service was unquoted in NAVER Whale before 1.0.40.7. This vulnerability can be used for persistent privilege escalation if it's available to create an executable file with System privilege by other vulnerable applications.Show less
1Navercorp
1Whale
Nov 21, 2024
Jan 8, 2018
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The Installer in Whale allows DLL hijacking.