Vulnerabilities > 360 > High

DATE CVE VULNERABILITY TITLE RISK
2023-04-19 CVE-2021-33971 Classic Buffer Overflow vulnerability in 360 Total Security 10.8.0.1060
Qihoo 360 (https://www.360.cn/) Qihoo 360 Safeguard (https://www.360.cn/) Qihoo 360 Total Security (http://www.360totalsecurity.com/) is affected by: Buffer Overflow.
local
low complexity
360 CWE-120
7.8
2023-04-19 CVE-2021-33974 Classic Buffer Overflow vulnerability in 360 Total Security 10.8.0.1060/10.8.0.1213
Qihoo 360 (https://www.360.cn/) Qihoo 360 Safeguard (https://www.360.cn/) Qihoo 360 Chrome (https://browser.360.cn/ee/) is affected by: Buffer Overflow.
network
low complexity
360 CWE-120
8.8
2023-03-23 CVE-2023-27077 Out-of-bounds Write vulnerability in 360 D901 Firmware
Stack Overflow vulnerability found in 360 D901 allows a remote attacker to cause a Distributed Denial of Service (DDOS) via a crafted HTTP package.
network
low complexity
360 CWE-787
7.5
2020-09-03 CVE-2020-24158 Uncontrolled Search Path Element vulnerability in 360 Speed Browser 12.0.1247.0
360 Speed Browser 12.0.1247.0 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code.
local
low complexity
360 CWE-427
7.8
2020-03-04 CVE-2019-3404 Unspecified vulnerability in 360 F5C Router Firmware and P0 Router Firmware
By adding some special fields to the uri ofrouter app function, the user could abuse background app cgi functions withoutauthentication.
network
low complexity
360
7.5
2019-11-04 CVE-2018-19031 Command Injection vulnerability in 360 products
A command injection vulnerability exists when the authorized user passes crafted parameter to background process in the router.
network
low complexity
360 CWE-77
8.8