778 matches found
CVE-2020-1458: Untrusted Search Path
A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library DLL files, aka 'Microsoft Office Remote Code Execution Vulnerability'...
CVE-2020-11081
osquery before version 4.4.0 enables a privilege escalation vulnerability. If a Window system is configured with a PATH that contains a user-writable directory then a local user may write a zlib1.dll DLL, which osquery will attempt to load. Since osquery runs with elevated privileges this enables...
CVE-2020-9100: Uncontrolled Search Path Element
Earlier than HiSuite 10.1.0.500 have a DLL hijacking vulnerability. This vulnerability exists due to some DLL file is loaded by HiSuite improperly. And it allows an attacker to load this DLL file of the attacker's choosing...
CVE-2019-19166
Tobesoft XPlatform v9.1, 9.2.0, 9.2.1 and 9.2.2 have a vulnerability that can load unauthorized DLL files. It allows attacker to cause remote code execution...
CVE-2019-19166: Download of Code Without Integrity Check
Tobesoft XPlatform v9.1, 9.2.0, 9.2.1 and 9.2.2 have a vulnerability that can load unauthorized DLL files. It allows attacker to cause remote code execution...
IBM Tivoli Monitoring Unauthorized Access Vulnerability
IBM Tivoli Monitoring is a set of system monitoring software from IBM in the United States. A security vulnerability exists in IBM Tivoli Monitoring versions 6.3.0 through 630 FP7 including Service Pack. The vulnerability can be exploited by an attacker to load other DLL files located in the same...
CVE-2020-4311: Incorrect Permission Assignment for Critical Resource
IBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system. By placing a specially crafted file, an attacker could exploit this vulnerability to load other DLL files located in the same directory and execute arbitrary code on the system. IBM X-Force ID: 17708...
CVE-2020-7490: Untrusted Search Path
A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic V1.1 HotFix 15 and prior and Vijeo Designer V6.9 SP9 and prior, which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product...
CVE-2020-8096
Untrusted Search Path vulnerability in Bitdefender High-Level Antimalware SDK for Windows allows an attacker to load third party code from a DLL library in the search path. This issue affects: Bitdefender High-Level Antimalware SDK for Windows versions prior to 3.0.1.204...
Malwarebytes Anti-Malware Remote Code Execution (CVE-2019-6739)
A remote code execution vulnerability exists in Malwarebytes Anti-Malware. The vulnerability is due to improper sanitization of user-supplied data which may be passed to the application as an option regarding the DLL loading path. A remote attacker could exploit the vulnerability by enticing a us...
Bitdefender Endpoint Security Tool Code Issue Vulnerability
Bitdefender Endpoint Security Tool is an endpoint security management tool from the Romanian company Bitdefender. A code issue vulnerability exists in the EPSecurityService.exe file in versions prior to Bitdefender Endpoint Security Tools 6.6.11.163. The vulnerability stems from an improper desig...
CVE-2020-8601
Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located in the same directory...
CVE-2020-8601
Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located in the same directory...
CVE-2020-8601
Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located in the same directory...
CVE-2020-8601
Trend Micro Vulnerability Protection 2.0 is affected by a DLL sideloading issue in the product installer that could load other DLL files located in the same directory. The vulnerability arises during installation, enabling local manipulation of loaded DLLs. Available public references describe Tr...
CVE-2013-3942
Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability...
Remote code execution
Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability...
CVE-2013-3942
Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability...
CVE-2013-3942
CVE-2013-3942 affects PotPlayer prior to 1.5.39659. The vulnerability is a DLL loading Arbitrary Code Execution vulnerability rooted in the way the player loads DLLs. Public references in the connected documents describe the impact as arbitrary code execution, with an indication of potential expl...