CVE-2020-8469

Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation...

Security Bulletin: Multiple security vulnerabilities in IBM Java SDK affects IBM Voice Gateway

Summary Multiple security vulnerabilities in IBM Java SDK affects IBM Voice Gateway Vulnerability Details CVEID: CVE-2020-2604 DESCRIPTION: An unspecified vulnerability in Java SE could allow an unauthenticated attacker to take control of the system. CVSS Base score: 8.1 CVSS Temporal Score: See:...

Foxit PDF Editor Personal Edition Installer has a dll Hijacking Vulnerability

Foxit PDF Editor is a pdf editor from Fujian Foxit Software Development Co., Ltd. that allows you to easily modify the content of a PDF document in a WYSIWYG manner for reliable and convenient editing without the need to understand PDF format knowledge. There is a dll hijacking vulnerability in t...

FortiClient - installer DLL Hijacking Vulnerability

Multiple unsafe search path vulnerabilities in FortiClient online installers may allow an attacker with control over the directory in which the installers reside to execute arbitrary code on the system via uploading malicious .dll files in that directory...

CVE-2020-9418

An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hijacking...

CVE-2020-9418

An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hijacking...

Design/Logic Flaw

An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hijacking...

CVE-2020-9418

An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hijacking...

CVE-2020-9418

CVE-2020-9418 affects PDFescape Desktop (≤ 4.0.22). The installer is vulnerable to DLL hijacking due to an untrusted search path, enabling local privilege elevation and code execution. Affected component: installer binary; root cause: DLL search order/location handling. Exploitation is described ...

Tencent Computer Butler PC client suffers from Dll hijacking vulnerability

Tencent PC Butler is a free security software launched by Tencent. It has the functions of cloud checking and killing Trojans, system acceleration, vulnerability repair, real-time protection, network speed protection, computer clinic, health assistant, desktop organization, document protection an...

Adobe Prelude CC < 8.1.1 Arbitrary Code Execution (APSB19-35)

The version of Adobe Prelude CC installed on the remote Windows host is prior to 8.1.1 It is, therefore, affected by a vulnerability as referenced in the apsb19-35 advisory: - Insecure Library Loading DLL hijacking potentially leading to arbitrary code execution CVE-2019-7961 Note that Nessus has...

Adobe Premiere Pro CC < 13.1.3 Remote Code Execution (APSB19-33)

The version of Adobe Premiere Pro CC installed on the remote Windows host is prior to 13.1.3. It is, therefore, affected by a vulnerability as referenced in the apsb19-33 advisory: - Insecure Library Loading DLL hijacking potentially leading to arbitrary code execution CVE-2019-7931 Note that...

Design/Logic Flaw

An issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on unpatched Windows systems, an attacker could include in the same directory as the affected executable a DLL using the name of a Windows DLL. This DLL must be preloaded by the executable for example,...

Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths...

Google Chrome suffers from dll hijacking vulnerability

Google Chrome is a browser developed by Google Inc. Google Chrome suffers from a dll hijacking vulnerability that can be exploited by an attacker to execute arbitrary code or lift privileges...

Beijing Sogou Information Service Co., Ltd. dll hijacking vulnerability in Sogou Browser

Sogou High Speed Browser pioneered the "Web Follow" feature, which provides website content to users in the form of subscription. Sogou Browser has a dll hijacking vulnerability, which can be exploited by attackers to remotely control a user's computer or implant a Trojan horse...

CVE-2020-3153

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths...

CVE-2020-3153

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths...

CVE-2020-3153 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths...

CVE-2020-3153 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths...