Vulnerabilities (CVE)

Filtered by vendor Techsmith Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-3130 1 Techsmith 1 Snagit 2020-05-13 9.3 HIGH N/A
Untrusted search path vulnerability in TechSmith Snagit all versions 10.x and 11.x allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a snag, snagcc, or snagprof file.
CVE-2008-6061 1 Techsmith 1 Camtasia Studio 2018-10-11 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) controller files created by Techsmith Camtasia Studio before 5 allows remote attackers to inject arbitrary additional SWF content via a URL in the csPreloader parameter.
CVE-2015-5487 1 Techsmith 1 Camtasia Relay 2015-09-03 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in the Camtasia Relay module 6.x-2.x before 6.x-3.2 and 7.x-2.x before 7.x-1.3 for Drupal allows remote authenticated users with the "view meta information" permission to inject arbitrary web script or HTML via unspecified vectors related to the meta access tab.
CVE-2010-5234 1 Techsmith 1 Camtasia Studio 2012-09-07 6.9 MEDIUM N/A
Multiple untrusted search path vulnerabilities in Camtasia Studio 7.0.1 build 57 allow local users to gain privileges via a Trojan horse (1) MFC90ENU.DLL or (2) MFC90LOC.DLL file in the current working directory, as demonstrated by a directory that contains a .cmmp or .camrec file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.