Vulnerabilities (CVE)

Filtered by vendor Hancom Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-7882 2 Hancom, Microsoft 2 Anysign4pc, Windows 2021-11-26 6.4 MEDIUM 9.1 CRITICAL
Using the parameter of getPFXFolderList function, attackers can see the information of authorization certification and delete the files. It occurs because the parameter contains path traversal characters(ie. '../../../')
CVE-2018-5195 1 Hancom 1 Thinkfree Office Neo 2018-02-02 7.5 HIGH 9.8 CRITICAL
Hancom NEO versions 9.6.1.5183 and earlier have a buffer Overflow vulnerability that leads remote attackers to execute arbitrary commands when performing the hyperlink Attributes in document.