49 matches found
CVE-2019-8453
Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions. This can allow a local attacker to replace a DLL file with a malicious one and cause Denial of Service to the client...
CVE-2022-39062
A vulnerability has been identified in SICAM TOOLBOX II All versions V07.10. Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with low privileges to replace DLLs and conduct a privilege escalation...
CVE-2024-47576
CVE-2024-47576 concerns the SAP Product Lifecycle Costing Client (versions
Unable to Launch Applications After VDA Upgrade to 1912 CU9 Due to Missing Working Directory
Please note: You can download the required file from the Citrix downloads website by visiting the following link:https://www.citrix.com/downloads/citrix-tools To apply the updated DLL with the tested code changes, please replace the files in the specified locations on the Multi-Session VDA as...
CVE-2022-47631: Time-of-check Time-of-use (TOCTOU) Race Condition
Razer Synapse through 3.7.1209.121307 allows privilege escalation due to an unsafe installation path and improper privilege management. Attackers can place DLLs into %PROGRAMDATA%\Razer\Synapse3\Service\bin if they do so before the service is installed and if they deny write access for the SYSTEM...
CVE-2022-47631
Razer Synapse through 3.7.1209.121307 allows privilege escalation due to an unsafe installation path and improper privilege management. Attackers can place DLLs into %PROGRAMDATA%\Razer\Synapse3\Service\bin if they do so before the service is installed and if they deny write access for the SYSTEM...
Siemens SICAM TOOLBOX II Execution with Unnecessary Privileges Vulnerability
SICAM TOOLBOX II is an engineering solution for plants and systems of all sizes. It allows data collection, data modeling, configuration and parameterization. It is used for process information engineering of automation and central control room systems. Siemens SICAM TOOLBOX II has an Execute wit...
CVE-2022-39062
A vulnerability has been identified in SICAM TOOLBOX II All versions V07.10. Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with low privileges to replace DLLs and conduct a privilege escalation...
CVE-2022-39062
A vulnerability has been identified in SICAM TOOLBOX II All versions V07.10. Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with low privileges to replace DLLs and conduct a privilege escalation...
CVE-2022-39062
A vulnerability has been identified in SICAM TOOLBOX II All versions V07.10. Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with low privileges to replace DLLs and conduct a privilege escalation...
CVE-2022-39062
CVE-2022-39062 affects Siemens SICAM TOOLBOX II (all versions prior to V07.10). The issue is an incorrect permission assignment for critical resources (product folders), which could allow an authenticated low-privilege user to replace DLLs and perform privilege escalation. MITRE-like impact is lo...
PT-2023-4720 · Unknown · Sicam Toolbox Ii
Name of the Vulnerable Software and Affected Versions: SICAM TOOLBOX II versions prior to V07.10 Description: A vulnerability has been identified in SICAM TOOLBOX II where affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with lo...
CVE-2022-39062: Incorrect Permission Assignment for Critical Resource
A vulnerability has been identified in SICAM TOOLBOX II All versions V07.10. Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with low privileges to replace DLLs and conduct a privilege escalation...
CVE-2021-35957
Stormshield Endpoint Security Evolution 2.0.0 through 2.0.2 does not accomplish the intended defense against local administrators who can replace the Visual C++ runtime DLLs in %WINDIR%\system32 with malicious ones...
LOCMan PLM Grouping Module Code Execution
The vulnerability of the grouping module for control devices used to manage servers, databases, reference manuals, and other components of the “Center for Control System” in the engineering data and product lifecycle management system LOCsMAN:PLM is related to the unlimited loading of dangerous...
database update module of Code Execution
The vulnerability of the Active Business Process Automation Module of LOCsMAN WorkFlow Audit Service is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow attackers to execute arbitrary code by replacing the dll library e.g., msimg32.dll in the...
PT-2021-3222
Name of the Vulnerable Software and Affected Versions LODSMAN:PLM affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the update display module of the LODSMAN:PLM system. Exploitation of this issue could allow an attacker to execute...
PT-2021-3223
Name of the Vulnerable Software and Affected Versions LODSMAN:PLM affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the application server load optimization service, which can be exploited to execute arbitrary code by replacing dll...
PT-2021-3205
Name of the Vulnerable Software and Affected Versions LOCMAN Клиент affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the LOCMAN Клиент module of the LOCMAN:PLM system. Exploitation of this issue could allow an attacker to execute...
PT-2021-3208
Name of the Vulnerable Software and Affected Versions LOOTSMAN:PLM affected versions not specified Description The issue is related to the automatic data synchronization module "ЛОЦМАН Планировщик синхронизации" of the LOOTSMAN:PLM system, which allows for unlimited upload of dangerous file types...