CVE-2022-47631

Razer Synapse through 3.7.1209.121307 allows privilege escalation due to an unsafe installation path and improper privilege management. Attackers can place DLLs into %PROGRAMDATA%\Razer\Synapse3\Service\bin if they do so before the service is installed and if they deny write access for the SYSTEM...

CVE-2022-47631: Time-of-check Time-of-use (TOCTOU) Race Condition

Razer Synapse through 3.7.1209.121307 allows privilege escalation due to an unsafe installation path and improper privilege management. Attackers can place DLLs into %PROGRAMDATA%\Razer\Synapse3\Service\bin if they do so before the service is installed and if they deny write access for the SYSTEM...

Siemens SICAM TOOLBOX II Execution with Unnecessary Privileges Vulnerability

SICAM TOOLBOX II is an engineering solution for plants and systems of all sizes. It allows data collection, data modeling, configuration and parameterization. It is used for process information engineering of automation and central control room systems. Siemens SICAM TOOLBOX II has an Execute wit...

CVE-2022-39062

A vulnerability has been identified in SICAM TOOLBOX II All versions V07.10. Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with low privileges to replace DLLs and conduct a privilege escalation...

CVE-2022-39062

A vulnerability has been identified in SICAM TOOLBOX II All versions V07.10. Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with low privileges to replace DLLs and conduct a privilege escalation...

CVE-2022-39062

A vulnerability has been identified in SICAM TOOLBOX II All versions V07.10. Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with low privileges to replace DLLs and conduct a privilege escalation...

CVE-2022-39062

CVE-2022-39062 affects Siemens SICAM TOOLBOX II (all versions prior to V07.10). The issue is an incorrect permission assignment for critical resources (product folders), which could allow an authenticated low-privilege user to replace DLLs and perform privilege escalation. MITRE-like impact is lo...

PT-2023-4720 · Unknown · Sicam Toolbox Ii

Name of the Vulnerable Software and Affected Versions: SICAM TOOLBOX II versions prior to V07.10 Description: A vulnerability has been identified in SICAM TOOLBOX II where affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with lo...

CVE-2022-39062: Incorrect Permission Assignment for Critical Resource

A vulnerability has been identified in SICAM TOOLBOX II All versions V07.10. Affected applications do not properly set permissions for product folders. This could allow an authenticated attacker with low privileges to replace DLLs and conduct a privilege escalation...

CVE-2021-35957

Stormshield Endpoint Security Evolution 2.0.0 through 2.0.2 does not accomplish the intended defense against local administrators who can replace the Visual C++ runtime DLLs in %WINDIR%\system32 with malicious ones...

The vulnerability of the grouping module for control devices used to manage servers, databases, reference manuals, and other components of the “Center for Complex Management” system of engineering data and product life cycle management (LOCMan:PLM) allows unauthorized users to load files of a dangerous type indefinitely, enabling them to execute arbitrary code.

The vulnerability of the grouping module for control devices used to manage servers, databases, reference manuals, and other components of the “Center for Control System” in the engineering data and product lifecycle management system LOCsMAN:PLM is related to the unlimited loading of dangerous...

The vulnerability of the database update module of the Engineering Data and Product Lifecycle Management System LOCMAN:PLM, related to unlimited loading of dangerous type files, allows a perpetrator to execute arbitrary code.

The vulnerability of the Active Business Process Automation Module of LOCsMAN WorkFlow Audit Service is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow attackers to execute arbitrary code by replacing the dll library e.g., msimg32.dll in the...

PT-2021-3223

Name of the Vulnerable Software and Affected Versions LODSMAN:PLM affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the application server load optimization service, which can be exploited to execute arbitrary code by replacing dll...

PT-2021-3214

Name of the Vulnerable Software and Affected Versions LOCMAN:PLM affected versions not specified Description The issue is related to a data exchange module vulnerability in the "ЛОЦМАН WorkFlow" subsystem, which allows for unlimited upload of dangerous file types between different "ЛОЦМАН WorkFlo...

PT-2021-3222

Name of the Vulnerable Software and Affected Versions LODSMAN:PLM affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the update display module of the LODSMAN:PLM system. Exploitation of this issue could allow an attacker to execute...

PT-2021-3208

Name of the Vulnerable Software and Affected Versions LOOTSMAN:PLM affected versions not specified Description The issue is related to the automatic data synchronization module "ЛОЦМАН Планировщик синхронизации" of the LOOTSMAN:PLM system, which allows for unlimited upload of dangerous file types...

PT-2021-3200

Name of the Vulnerable Software and Affected Versions LOTCMAN:PLM affected versions not specified Description The issue is related to the "ЛОЦМАН Дизайнер форм" module in the LOTCMAN:PLM system, which allows for unlimited upload of dangerous file types. This can be exploited to execute arbitrary...

PT-2021-3205

Name of the Vulnerable Software and Affected Versions LOCMAN Клиент affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the LOCMAN Клиент module of the LOCMAN:PLM system. Exploitation of this issue could allow an attacker to execute...

The vulnerability of the Agent component of the Dr.Web anti-virus protection software, Dr.Web Enterprise Security Suite, allows a hacker to execute system commands.

The vulnerability of the Agent Dr.Web component in the Dr.Web Enterprise Security Suite antivirus protection tool is related to deficiencies in the mechanism for checking the digital signatures of executable files during the creation of communication channels with drivers. Exploiting this...

PT-2019-19050

Name of the Vulnerable Software and Affected Versions Check Point ZoneAlarm versions up to 15.4.062 Description The issue allows a local attacker to potentially cause Denial of Service to the client by replacing a DLL file with a malicious one, due to the DLLs being loaded from directories where...