Lucene search
+L

4168 matches found

CNVD
CNVD
added 2020/04/15 12:00 a.m.5 views

WeChat PC version suffers from dll hijacking vulnerability

WeChat for PC is a cross-platform communication tool. WeChat PC version suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute arbitrary code...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2020/03/31 12:00 a.m.5 views

DLL Hijacking Vulnerability in CCtalk Windows Edition

CCtalk is a real-time interactive education platform under Hujiang. A DLL hijacking vulnerability exists in CCtalk for Windows, which can be exploited by attackers to execute malicious code...

7.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2020/03/27 12:00 a.m.32 views

Atlassian Jira 8.3.x < 8.5.2 DLL Hijacking Vulnerability (JRASERVER-70407)

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is version 8.3.x prior to 8.5.2. It is, therefore, affected by a DLL hijacking vulnerability. The usage of Tomcat in Jira allows local attackers with permission to write a DLL file to a...

7.8CVSS7.6AI score0.00367EPSS
SaveExploits0References3
Prion
Prion
added 2020/03/25 6:15 p.m.24 views

Privilege escalation

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

4.4CVSS8.4AI score0.0083EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2020/03/25 5:28 p.m.100 views

CVE-2020-3803

Adobe Acrobat/Reader (Windows) is affected by an insecure library loading (DLL hijacking) vulnerability (CVE-2020-3803) in multiple older builds including 2020.006.20034 and earlier and 2015.x/2017.x variants. The root cause is insecure DLL loading, which could allow a local attacker to escalate ...

7.8CVSS8.4AI score0.0083EPSS
SaveExploits0References1Affected Software2
Tenable Nessus
Tenable Nessus
added 2020/03/19 12:00 a.m.45 views

Adobe Reader < 2015.006.30518 / 2017.011.30166 / 2020.006.20042 Multiple Vulnerabilities (APSB20-13)

The version of Adobe Reader installed on the remote Windows host is a version prior to 2015.006.30518, 2017.011.30166, or 2020.006.20042. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier,...

10CVSS9.3AI score0.07581EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
added 2020/03/19 12:00 a.m.34 views

Adobe Acrobat < 2015.006.30518 / 2017.011.30166 / 2020.006.20042 Multiple Vulnerabilities (APSB20-13)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30518, 2017.011.30166, or 2020.006.20042. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier,...

10CVSS9.3AI score0.07581EPSS
SaveExploits0References14
OpenVAS
OpenVAS
added 2020/03/18 12:00 a.m.32 views

Adobe Acrobat DC 2015 Security Update (APSB20-13) - Windows

Adobe Reader DC Classic 2015 is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

10CVSS8.8AI score0.07581EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/03/16 12:00 a.m.6 views

Beijing Qihoo Technology Co., Ltd. 360 Security Guard suffers from dll hijacking vulnerability

360 Security Guard is a security antivirus program by Qihoo 360. Ltd. 360 Security Guard has a dll hijacking vulnerability that can be exploited by attackers to execute arbitrary code...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2020/03/13 12:00 a.m.10 views

Trend Micro Password Manager DLL Hijacking Vulnerability (CNVD-2020-21008)

Trend Micro Password Manager is a secure password management solution from Trend Micro. A DLL hijacking vulnerability exists in version 5.0 of Trend Micro Password Manager for Windows platforms, which can be exploited by attackers to elevate privileges...

7.8CVSS7AI score0.00455EPSS
SaveExploits0References1
NVD
NVD
added 2020/03/12 11:15 p.m.21 views

CVE-2020-8469

Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation...

7.8CVSS7.6AI score0.00455EPSS
SaveExploits0References2
OSV
OSV
added 2020/03/12 11:15 p.m.5 views

CVE-2020-8469

Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation...

7.8CVSS7.1AI score0.00455EPSS
SaveExploits0References2
Prion
Prion
added 2020/03/12 11:15 p.m.28 views

Design/Logic Flaw

Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation...

6.9CVSS7.6AI score0.00455EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/03/12 11:05 p.m.28 views

CVE-2020-8469

Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation...

7.7AI score0.00455EPSS
SaveExploits0References2
CVE
CVE
added 2020/03/12 11:05 p.m.79 views

CVE-2020-8469

Trend Micro Password Manager for Windows 5.0 is affected by a DLL hijacking vulnerability that could lead to local privilege escalation. This is documented across multiple sources; no exploitation status or remediation details are provided in the connected documents. Monitor for updates and rely ...

7.8CVSS7.5AI score0.00455EPSS
SaveExploits0References2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/03/10 9:40 p.m.53 views

Security Bulletin: Multiple security vulnerabilities in IBM Java SDK affects IBM Voice Gateway

Summary Multiple security vulnerabilities in IBM Java SDK affects IBM Voice Gateway Vulnerability Details CVEID: CVE-2020-2604 DESCRIPTION: An unspecified vulnerability in Java SE could allow an unauthenticated attacker to take control of the system. CVSS Base score: 8.1 CVSS Temporal Score: See:...

8.1CVSS1.2AI score0.04903EPSS
SaveExploits0Affected Software1
Metasploit
Metasploit
added 2020/03/10 12:00 a.m.190 views

CVE-2020-1170 Cloud Filter Arbitrary File Creation EOP

The Cloud Filter driver, cldflt.sys, on Windows 10 v1803 and later, prior to the December 2020 updates, did not set the IOFORCEACCESSCHECK or OBJFORCEACCESSCHECK flags when calling FltCreateFileEx and FltCreateFileEx2 within its HsmpOpCreatePlaceholders function with attacker controlled input. Th...

7.8CVSS8.1AI score0.01608EPSS
SaveExploits4
Metasploit
Metasploit
added 2020/03/10 12:00 a.m.220 views

Background Intelligent Transfer Service Arbitrary File Move Privilege Elevation Vulnerability

This module exploits CVE-2020-0787, an arbitrary file move vulnerability in outdated versions of the Background Intelligent Transfer Service BITS, to overwrite C:\Windows\System32\WindowsCoreDeviceInfo.dll with a malicious DLL containing the attacker's payload. To achieve code execution as the...

7.8CVSS8.8AI score0.42524EPSS
SaveExploits7
CNVD
CNVD
added 2020/03/10 12:00 a.m.11 views

Foxit PDF Editor Personal Edition Installer has a dll Hijacking Vulnerability

Foxit PDF Editor is a pdf editor from Fujian Foxit Software Development Co., Ltd. that allows you to easily modify the content of a PDF document in a WYSIWYG manner for reliable and convenient editing without the need to understand PDF format knowledge. There is a dll hijacking vulnerability in t...

7.4AI score
SaveExploits0
Fortinet
Fortinet
added 2020/03/09 12:00 a.m.84 views

FortiClient - installer DLL Hijacking Vulnerability

Multiple unsafe search path vulnerabilities in FortiClient online installers may allow an attacker with control over the directory in which the installers reside to execute arbitrary code on the system via uploading malicious .dll files in that directory...

9.3CVSS6.1AI score0.02613EPSS
SaveExploits0Affected Software2
Rows per page
Query Builder