Vulnerabilities (CVE)

Filtered by vendor No-ip Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-2747 2 Microsoft, No-ip 2 Windows, Dynamic Update Client 2023-12-10 2.1 LOW N/A
No-IP Dynamic Update Client (DUC) 2.2.1 on Windows uses weak permissions for the HKLM\SOFTWARE\Vitalwerks\DUC registry key, which allows local users to obtain obfuscated passwords and other sensitive information by reading the (1) TrayPassword, (2) Username, (3) Password, and (4) Hosts registry values.
CVE-2008-5369 1 No-ip 1 No-ip2 2023-12-10 6.9 MEDIUM N/A
noip2 in noip2 2.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/noip2 temporary file.