4030 matches found
Branded Shadow (Windows client) suffers from a dll hijacking vulnerability
Branding is a machine vision guru that acquires images of real-world objects through a camera lens to achieve object recognition and localization, detection of surface defects, state identification, size measurement, color recognition, and other functions. A dll hijacking vulnerability exists in...
CVE-2020-13771
Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a nonexistent library file, allowing under certain conditions one to gain code execution and elevation of privileges to the level of privilege held by the vulnerable component such as NT...
CVE-2020-13771
Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a nonexistent library file, allowing under certain conditions one to gain code execution and elevation of privileges to the level of privilege held by the vulnerable component such as NT...
Design/Logic Flaw
Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a nonexistent library file, allowing under certain conditions one to gain code execution and elevation of privileges to the level of privilege held by the vulnerable component such as NT...
CVE-2020-13771
CVE-2020-13771 affects Ivanti Endpoint Manager up to 2020.1.1. The vulnerability arises when certain executables (ldiscn32.exe, IpmiRedirectionService.exe, LDAPWhoAmI.exe, ldprofile.exe) load a nonexistent library file, relying on Windows search order, which can lead to code execution and privile...
CVE-2020-13771
Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a nonexistent library file, allowing under certain conditions one to gain code execution and elevation of privileges to the level of privilege held by the vulnerable component such as NT...
B. Braun Melsungen AG OnlineSuite AP DLL Hijacking Vulnerability
B. Braun Melsungen AG onlinesuite is a digital management platform for healthcare from B. Braun Melsungen AG. A security vulnerability exists in B. Braun OnlineSuite AP 3.0 and prior versions that allows a local attacker to execute code on the system as a highly privileged user...
CVE-2020-25174
A DLL hijacking vulnerability in the B. Braun OnlineSuite Version AP 3.0 and earlier allows local attackers to execute code on the system as a high privileged user...
CVE-2020-25174
A DLL hijacking vulnerability in the B. Braun OnlineSuite Version AP 3.0 and earlier allows local attackers to execute code on the system as a high privileged user...
Spoofing
A DLL hijacking vulnerability in the B. Braun OnlineSuite Version AP 3.0 and earlier allows local attackers to execute code on the system as a high privileged user...
CVE-2020-25174 B. Braun OnlineSuite
A DLL hijacking vulnerability in the B. Braun OnlineSuite Version AP 3.0 and earlier allows local attackers to execute code on the system as a high privileged user...
CVE-2020-25174
The CVE-2020-25174 entry covers a DLL hijacking vulnerability in B. Braun OnlineSuite AP versions 3.0 and earlier. The root cause is an uncontrolled search path element that allows a local attacker to execute code with high privileges on the target system. Affected product: OnlineSuite AP 3.0 and...
CVE-2020-5145
SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading DLL hijacking vulnerability. Successful exploitation could lead to remote code execution in the target system...
CVE-2020-5145
SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading DLL hijacking vulnerability. Successful exploitation could lead to remote code execution in the target system...
Remote code execution
SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading DLL hijacking vulnerability. Successful exploitation could lead to remote code execution in the target system...
CVE-2020-5145
CVE-2020-5145 affects the SonicWall Global VPN Client (versions 4.10.4.0314 and earlier). The issue is an insecure library loading mechanism (DLL hijacking) that, if exploited, can lead to remote code execution on the target system. Multiple connected sources corroborate the vulnerability and its...
SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability
SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading DLL hijacking vulnerability. Successful exploitation could lead to remote code execution in the target system. CVE: CVE-2020-5145 Last updated: Oct. 28, 2020, 9:39 a.m...
Chocolatey Boxstarter is vulnerable to privilege escalation due to weak ACLs
Overview Chocolatey Boxstarter fails to properly set ACLs, which can allow an unprivileged Windows user to be able to run arbitrary code with SYSTEM privileges. Description CVE-2020-15264 The Chocolatey Boxstarter installer fails to set a secure access-control list ACL on the...
Overlay Malware Targets Windows Users with a DLL Hijack Twist
Brazilians are being warned of a new overlay malware targeting Windows users in order to siphon victims’ financial data and drain their bank accounts. Researchers say what the malware, dubbed Vizom, lacks in sophistication it makes up for in its creative abuse of the Windows ecosystem. Trusteer, ...
