Naver Corporation vulnerabilities

7 vulnerabilities

Known vulnerabilities in Naver Corporation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.

Products

5
PrioritiseCVE-2020-9753naver corporation · whale browser installer +1 morenaver corporation whale browser installerWhale Browser Installer before 1.2.0.5 versions don't support signature verification for Flash installer.CVSS9.1CriticalEPSS1.07%PrioritiseCVE-2020-9752naver corporation · naver cloud explorer +1 morenaver corporation naver cloud explorerNaver Cloud Explorer before 2.2.2.11 allows the attacker can move a local file in any path on the filesystem as a system privilege through its named pipe.CVSS9.8CriticalEPSS1.15%PrioritiseCVE-2020-9751naver corporation · naver cloud explorer +1 morenaver corporation naver cloud explorerNaver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the upgrade.CVSS9.1CriticalEPSS0.48%PrioritiseCVE-2019-13157naver corporation · naver vaccine +1 morenaver corporation naver vaccinensGreen.dll in Naver Vaccine 2.1.4 allows remote attackers to overwrite arbitary files via directory traversal sequences in a filename within nsz archive.CVSS7.5HighEPSS1.65%PrioritiseCVE-2019-13156naver corporation · ndrive +1 morenaver corporation ndriveNDrive(1.2.2).sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when reading data from IOCTL handle.CVSS7.5HighEPSS1.04%RoutineCVE-2018-12449naver corporation · whale browser installer +1 morenaver corporation whale browser installerThe Whale browser installer 0.4.3.0 and earlier versions allows DLL hijacking.CVSS7.8HighEPSS0.90%RoutineCVE-2018-12448naver corporation · whale browser +1 morenaver corporation whale browserWhale Browser before 1.3.48.4 displays no URL information but only a title of a web page on the browser's address bar when visiting a non-http page, which allows an attacker to display a malicious web page with a fake domain name.CVSS5.3MediumEPSS0.77%