Lucene search
+L

4983 matches found

Prion
Prion
•added 2023/11/08 10:15 p.m.•33 views

Design/Logic Flaw

BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.4.2 is vulnerable to a DLL Hijacking vulnerability. By placing a DLL in the Folder c:\DLLs, an attacker can run arbitrary code on every execution of BleachBit for Windows. This issue has been...

4.1CVSS7.7AI score0.00247EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/08 9:57 p.m.•46 views

CVE-2023-47113 DLL Search Order Hijacking vulnerability in BleachBit for Windows

BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.4.2 is vulnerable to a DLL Hijacking vulnerability. By placing a DLL in the Folder c:\DLLs, an attacker can run arbitrary code on every execution of BleachBit for Windows. This issue has been...

7.3CVSS7.6AI score0.00247EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/11/08 9:57 p.m.•29 views

CVE-2023-47113 DLL Search Order Hijacking vulnerability in BleachBit for Windows

BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.4.2 is vulnerable to a DLL Hijacking vulnerability. By placing a DLL in the Folder c:\DLLs, an attacker can run arbitrary code on every execution of BleachBit for Windows. This issue has been...

7.3CVSS7.7AI score
SaveExploits0References3
CVE
CVE
•added 2023/11/08 9:57 p.m.•70 views

CVE-2023-47113

CVE-2023-47113 affects BleachBit for Windows up to version 4.4.2, due to a DLL search order hijacking vulnerability: placing a malicious DLL in c:\DLLs allows code execution on each run. The issue has been fixed in version 4.5.0. Affected builds and advisories are documented by NVD, Red Hat, SUSE...

7.3CVSS7.4AI score0.00247EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/08 12:00 a.m.•4 views

CVE-2023-47113: Uncontrolled Search Path Element

BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.4.2 is vulnerable to a DLL Hijacking vulnerability. By placing a DLL in the Folder c:\DLLs, an attacker can run arbitrary code on every execution of BleachBit for Windows. This issue has been...

7.3CVSS7.3AI score0.00247EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/11/08 12:00 a.m.•19 views

PT-2023-30318

Name of the Vulnerable Software and Affected Versions BleachBit for Windows versions 4.4.2 and earlier Description BleachBit for Windows is vulnerable to a DLL Hijacking issue. This allows an attacker to run arbitrary code on every execution of BleachBit for Windows by placing a DLL in a specific...

7.3CVSS7.3AI score0.00247EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/07 12:00 a.m.•8 views

CVE-2023-0898: Uncontrolled Search Path Element

General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the application...

7.3CVSS7.5AI score0.00255EPSS
SaveExploits0References3
NVD
NVD
•added 2023/10/31 3:15 p.m.•23 views

CVE-2023-37243

The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots. Since the C:\Windows\Temp\Agent.Package.Availability folder inherits permissions from C:\Windows\Temp and Agent.Package.Availability.exe is susceptible t...

7.8CVSS7.6AI score0.00178EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/10/31 3:15 p.m.•18 views

CVE-2023-37243

The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots. Since the C:\Windows\Temp\Agent.Package.Availability folder inherits permissions from C:\Windows\Temp and Agent.Package.Availability.exe is susceptible t...

7.8CVSS5.8AI score0.00178EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/31 3:15 p.m.•25 views

Code injection

The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots. Since the C:\Windows\Temp\Agent.Package.Availability folder inherits permissions from C:\Windows\Temp and Agent.Package.Availability.exe is susceptible t...

4.3CVSS7.6AI score0.00178EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/31 2:34 p.m.•18 views

CVE-2023-37243

The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots. Since the C:\Windows\Temp\Agent.Package.Availability folder inherits permissions from C:\Windows\Temp and Agent.Package.Availability.exe is susceptible t...

7.8CVSS6.9AI score0.00178EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/10/31 2:34 p.m.•34 views

CVE-2023-37243

The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots. Since the C:\Windows\Temp\Agent.Package.Availability folder inherits permissions from C:\Windows\Temp and Agent.Package.Availability.exe is susceptible t...

7.8CVSS7.8AI score0.00178EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/31 2:34 p.m.•69 views

CVE-2023-37243

The vulnerability CVE-2023-37243 concerns the Windows Atera Agent Package Availability (Agent.Package.Availability.exe). The executable is launched with SYSTEM privileges at reboot, and its folder (C:\Windows\Temp\Agent.Package.Availability) inherits permissions from C:\Windows\Temp; this enables...

7.8CVSS7.5AI score0.00178EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/31 12:00 a.m.•4 views

CVE-2023-37243: Creation of Temporary File in Directory with Insecure Permissions

The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots. Since the C:\Windows\Temp\Agent.Package.Availability folder inherits permissions from C:\Windows\Temp and Agent.Package.Availability.exe is susceptible t...

7.8CVSS7.3AI score0.00178EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/10/25 12:00 a.m.•21 views

PT-2023-6720 · Sonicwall · Sonicwall Netextender Windows Client

Name of the Vulnerable Software and Affected Versions: SonicWall NetExtender Windows client versions 10.2.336 and earlier Description: The issue is related to a DLL Search Order Hijacking vulnerability in the start-up DLL component of the SonicWall NetExtender Windows client. This vulnerability c...

7.3CVSS7.3AI score0.00294EPSS
SaveExploits0References6
Packet Storm
Packet Storm
•added 2023/10/10 12:00 a.m.•317 views

Microsoft Windows 11 apds.dll DLL Hijacking

--------------------------------------------------------- Title: Microsoft Windows 11 - 'apds.dll' DLL hijacking Forced Date: 2023-09-01 Author: Moein Shahabi Vendor: https://www.microsoft.com Version: Windows 11 Pro 10.0.22621 Tested on: Windows 11x64 eng...

7.1AI score
SaveExploits0
NVD
NVD
•added 2023/10/09 12:15 p.m.•29 views

CVE-2023-45248

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 36497, Acronis Cyber Protect 16 Windows before build 37391...

7.3CVSS6.9AI score0.0028EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/10/09 12:15 p.m.•21 views

CVE-2023-45248

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 36497, Acronis Cyber Protect 16 Windows before build 37391...

7.3CVSS6.9AI score0.0028EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/09 12:15 p.m.•29 views

Privilege escalation

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 36497, Acronis Cyber Protect 16 Windows before build 37391...

3CVSS7.3AI score0.0028EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/09 11:08 a.m.•6 views

CVE-2023-45248

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 36497, Acronis Cyber Protect 16 Windows before build 37391...

6.6CVSS6.9AI score0.0028EPSS
SaveExploits0References1
Rows per page
Query Builder