4169 matches found
CVE-2024-34016
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 38235...
CVE-2024-34016
CVE-2024-34016 describes a local privilege escalation due to a DLL hijacking vulnerability affecting the Acronis Cyber Protect Cloud Agent (Windows) , prior to build 38235 . Multiple connected sources corroborate: the flaw is a DLL hijack leading to elevation of privileges, with the fixed/build 3...
Acronis Cyber Protect 代码问题漏洞
Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Switzerland. Combining backup, anti-malware, cybersecurity and endpoint management features such as vulnerability assessment, URL filtering, patch management and more. A code issue...
CVE-2024-44107
DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges and achieve arbitrary code execution...
CVE-2024-44103
DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...
CVE-2024-44103
DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...
CVE-2024-44103
Ivanti Workspace Control is affected by DLL hijacking in the management console prior to version 2025.2 (10.19.0.0). A locally authenticated attacker can escalate privileges due to an insecure DLL search path. Public sources corroborate that affected versions include 10.18.0.0 and earlier, with e...
CVE-2024-45281 DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform
SAP BusinessObjects Business Intelligence Platform allows a high privilege user to run client desktop applications even if some of the DLLs are not digitally signed or if the signature is broken. The attacker needs to have local access to the vulnerable system to perform DLL related tasks. This...
CVE-2024-45281 DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform
SAP BusinessObjects Business Intelligence Platform allows a high privilege user to run client desktop applications even if some of the DLLs are not digitally signed or if the signature is broken. The attacker needs to have local access to the vulnerable system to perform DLL related tasks. This...
PT-2024-6661 · Ivanti · Ivanti Workspace Control
Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to DLL hijacking in the management console of Ivanti Workspace Control, which allows a local authenticated attacker to escalate their privileges. This is...
PT-2024-6587 · Ivanti · Ivanti Workspace Control
Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to an uncontrolled search path element in the Ivanti Workspace Control software, which can be exploited to allow an attacker to escalate their privileges...
Ivanti Workspace Control 代码问题漏洞
Ivanti Workspace Control is a suite of workspace control software from Ivanti USA. The software includes features such as user management, application management, and report management. A code issue vulnerability previously existed in Ivanti Workspace Control version 10.18.0.0, which stemmed from...
Ivanti Workspace Control 代码问题漏洞
Ivanti Workspace Control is a suite of workspace control software from Ivanti USA. The software includes features such as user management, application management, and report management. A code issue vulnerability previously existed in Ivanti Workspace Control version 10.18.0.0, which stemmed from...
CVE-2024-6473
Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used...
CVE-2024-6473
CVE-2024-6473 details (MODE C): Yandex Browser for Desktop is affected on versions before 24.7.1.380 due to a DLL hijacking vulnerability caused by an untrusted search path. A PoC demonstrates DLL loading from a crafted path, validating the vulnerability exists in the cited build. The PoC targets...
CVE-2024-6473 DLL Hijacking in Yandex Browser
Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used...
CVE-2024-6473 DLL Hijacking in Yandex Browser
Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used...
PT-2024-5901 · Yandex +1 · Yandex Browser +1
Name of the Vulnerable Software and Affected Versions: Yandex Browser for Desktop versions prior to 24.7.1.380 Description: The issue is related to the use of an untrusted search path, which can lead to a DLL Hijacking Vulnerability. This vulnerability allows an attacker to execute arbitrary code...