276 matches found
CVE-2019-5539
VMware Workstation 15.x prior to 15.5.1 and Horizon View Agent 7.10.x prior to 7.10.1 and 7.5.x prior to 7.5.4 contain a DLL hijacking vulnerability due to insecure loading of a DLL by Cortado Thinprint. Successful exploitation of this issue may allow attackers with normal user privileges to...
CVE-2019-19689
Trend Micro HouseCall for Home Networks versions below 5.3.0.1063 could be exploited via a DLL Hijack related to a vulnerability on the packer that the program uses...
CVE-2019-19689
Trend Micro HouseCall for Home Networks versions below 5.3.0.1063 could be exploited via a DLL Hijack related to a vulnerability on the packer that the program uses...
Design/Logic Flaw
Trend Micro HouseCall for Home Networks versions below 5.3.0.1063 could be exploited via a DLL Hijack related to a vulnerability on the packer that the program uses...
CVE-2019-19689
Trend Micro HouseCall for Home Networks is affected by a DLL hijacking vulnerability associated with the packer used by the product. Affected versions are below 5.3.0.1063. The issue enables local exploitation through hijacking a DLL loading path, per the CVE-2019-19689 entries in NVD and related...
CVE-2019-19689
Trend Micro HouseCall for Home Networks versions below 5.3.0.1063 could be exploited via a DLL Hijack related to a vulnerability on the packer that the program uses...
CVE-2019-3667
DLL Search Order Hijacking vulnerability in the Microsoft Windows client in McAfee Tech Check 3.0.0.17 and earlier allows local users to execute arbitrary code via the local folder placed there by an attacker...
Rockwellautomation Connected Uncontrolled Search Path Element
A DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench CCW. The following versions are affected: Connected Components Workbench - Developer Edition, v9.01.00 and earlier: 9328-CCWDEVENE, 9328-CCWDEVZHE, 9328-CCWDEVFRE, 9328-CCWDEVITE, 9328-CCWDEVDEE, 9328-CCWDEVES...
Adobe Releases Security Patches For Critical Flash Player Vulnerabilities
It's Patch Tuesday again—the day of the month when both Adobe and Microsoft release security patches for vulnerabilities in their software. Adobe has just released its monthly security updates to address a total of 3 security vulnerabilities in only two of its products this time—Adobe Flash Playe...
UACME - Defeating Windows User Account Control
Defeating Windows User Account Control by abusing built-in Windows AutoElevate backdoor. System Requirements x86-32/x64 Windows 7/8/8.1/10 client, some methods however works on server version too. Admin account with UAC set on default settings required. Usage Run executable from command line:...
CVE-2019-8453
Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions. This can allow a local attacker to replace a DLL file with a malicious one and cause Denial of Service to the client...
Ubiquiti Inc.: UniFi Video v3.10.1 (Windows) Local Privileges Escalation to SYSTEM from arbitrary filedelete and DLL hijack vulnerabilities.
Summary: UniFi Video v3.10.1 for Windows 7/8/10 x64 Local Privileges Escalation to SYSTEM from arbitrary file deletion and DLL hijack vulnerabilities. The issue was fixed by adjusting the .tsExport folder when the controller is running on Windows and adjusting the SafeDllSearchMode in the windows...
VMware Workstation 14.1.5 VMware Player 15.0.2 - Host VMX Process Impersonation Hijack Privilege Escalation
VMware Workstation 14.1.5 VMware Player 15.0.2 - Host VMX Process Impersonation Hijack Privilege Escalation VMware: Host VMX Process Impersonation Hijack EoP Platform: VMware Workstation Windows v14.1.5 on Windows 10. Also tested VMware Player 15.0.2. Class: Elevation of Privilege Summary: The...
Symantec Ghost Solution Suite DLL Hijack
SUMMARY Symantec has released an update to address an issue that was discovered in the Ghost Solution Suite GSS product. AFFECTED PRODUCTS Ghost Solution Suite GSS --- CVE | Affected Versions | Remediation CVE-2018-18364 | Prior to 3.3 RU1 | Upgrade to 3.3 RU1 ISSUES CVE-2018-18364 ---...
CVE-2018-7799
A DLL hijacking vulnerability exists in Schneider Electric Software Update SESU, all versions prior to V2.2.0, which could allow an attacker to execute arbitrary code on the targeted system when placing a specific DLL file...
IBM Notes for Windows System Diagnostics service DLL load local elevation of privilege vulnerability
IBM Notes for Windows is a set of Windows-based collaborative office software from IBM. The software has e-mail, calendar, scheduling and other office functions.System Diagnostics service is one of the system diagnostics service. A security vulnerability exists in the System Diagnostics service i...
CVE-2018-5457
A uncontrolled search path element issue was discovered in Vyaire Medical CareFusion Upgrade Utility used with Windows XP systems, Versions 2.0.2.2 and prior versions. A successful exploit of this vulnerability requires the local user to install a crafted DLL on the target machine. The applicatio...
Bomgar Remote Support Local Privilege Escalation Vulnerability
Bomgar Remote Support suffers from a local privilege escalation vulnerability. Versions affected include 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before 16.2.4. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Advisory Name: Bomgar Remote Support - Loc...
Play TV 1.25.1 Build r123776 DLL Hijacking
Document Title: =============== Play TV v1.25.1Build r123776 - DLL Hijack Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2085 Release Date: ============= 2017-09-04 Vulnerability Laboratory ID VL-ID: ====================================...
Play TV v1.25.1(Build r123776) - DLL Hijack Vulnerability
Document Title: =============== Play TV v1.25.1Build r123776 - DLL Hijack Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2085 Release Date: ============= 2017-09-04 Vulnerability Laboratory ID VL-ID: ====================================...