CVE-2019-1089

An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an RPC request. To exploit this vulnerability, a low level authenticated attacker could run a specially crafted application. The security update addresses this vulnerability by...

CVE-2019-1082

An elevation of privilege vulnerability exists in Microsoft Windows where a certain DLL, with Local Service privilege, is vulnerable to race planting a customized DLL.An attacker who successfully exploited this vulnerability could potentially elevate privilege to SYSTEM.The update addresses this...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Platform Cluster Manager Standard Edition, IBM Platform Cluster Manager Advanced Edition, Platform HPC, and Spectrum Cluster Foundation.

Summary There are multiple vulnerabilities in IBM®Runtime Environment Java™Version 7 used by IBM Platform Cluster Manager Standard Edition, IBM Platform Cluster Manager Advanced Edition, Platform HPC, and Spectrum Cluster Foundation. These issues have been addressed in IBM Java SDK updates in Apr...

CVE-2017-14010

SpiderControl MicroBrowser (touch panel operating system) is affected on Windows XP, Vista, 7, 8 and 10 for versions 1.6.30.144 and prior. The vulnerability is an uncontrolled search path element (CWE-427) that allows arbitrary code execution when a crafted DLL is loaded before the legitimate DLL...

CVE-2018-6765

CVE-2018-6765 affects Swisscom MySwisscomAssistant 2.17.1.1065. The vulnerability is due to DLL loading handling: multiple DLLs (dwmapi.dll, IPHLPAPI.DLL, WindowsCodecs.dll, RpcRtRemote.dll, CRYPTSP.dll, rasadhlp.dll, DNSAPI.dll, ntmarta.dll, netbios.dll, olepro32.dll, security.dll, winhttp.dll, ...

Remotely Exploitable Flaw Found In HP Enterprise Printers—Patch Now

Security researchers have discovered a potentially dangerous vulnerability in the firmware of various Hewlett Packard HP enterprise printer models that could be abused by attackers to run arbitrary code on affected printer models remotely. The vulnerability CVE-2017-2750, rated as high in severit...

CVE-2017-10821

Untrusted search path vulnerability in Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou Program program released on 2013 September 30 Distributed on the website until 2017 May 17 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10823

Untrusted search path vulnerability in Installer for Shin Kinkyuji Houkoku Data Nyuryoku Program program released on 2011 March 10 Distributed on the website till 2017 May 17 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2016-4901

Untrusted search path vulnerability in The installer of e-Tax Software all versions allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-6455

CVE-2017-6455 affects NTP versions prior to 4.2.8p10 and 4.3.x prior to 4.3.94 when using PPSAPI. Local users can gain privileges by placing a DLL in the PPSAPI_DLLS environment variable, enabling a local privilege escalation. Public references in the connected documents confirm the vulnerability...

Trend Micro Endpoint Sensor DLL loads remote code execution vulnerability (CNVD-2017-03613)

Trend Micro Endpoint Sensor is a context-aware endpoint security monitor from Trend Micro designed to accelerate discovery, investigation and response to security incidents. Trend Micro Endpoint Sensor suffers from a DLL loading remote code execution vulnerability. An attacker could exploit this...

The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.

The vulnerability of the atmfd.dll library in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to obtain confidential information from the process’s memory...

Microsoft Authorization Manager 6.1.7601 XXE Injection

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-AZMAN-XXE-FILE-EXFILTRATION.txt + ISR: ApparitionSec Vendor: ================== www.microsoft.com Product: ============================== Microsoft Authorization...

VMware Workstation 12.x < 12.5.0 Multiple Vulnerabilities (VMSA-2016-0014)

The version of VMware Workstation installed on the remote host is 12.x prior to 12.5.0. It is, therefore, affected by multiple vulnerabilities : - A heap buffer overflow condition exists in Cortado ThinPrint due to improper validation of user-supplied input. An attacker on the guest can exploit...

CVE-2016-3958

Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function...

MS15-082: Description of the security update for RDP in Windows: August 11, 2015 (KB3075222)

None None...

VMware Horizon Client for windows arbitrary code execution vulnerability (CNVD-2015-03817)

Horizon Client for Windows is used to virtualize desktops and applications. A memory allocation error vulnerability exists in Horizon Client for Windows 'TPView.ddl' that allows remote attackers on the View desktop to execute arbitrary code...

CVE-2014-6332

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted web site, as...

openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2011:0935-2)

Mozilla Thunderbird was updated to 3.1.12 fixing various bugs and security issues : Mozilla Foundation Security Advisory 2011-32 MFSA 2011-32 http://www.mozilla.org/security/announce/2011/mfsa2011-32.html Many of the issues listed below are not exploitable through mail since JavaScript is disable...

Websense Email Security Heartbeat Information Disclosure (Heartbleed)

The version of Websense Email Security installed on the remote Windows host contains a bundled version of an OpenSSL DLL file. It is, therefore, affected by an information disclosure vulnerability. An out-of-bounds read error, known as the 'Heartbleed Bug', exists related to handling TLS heartbea...