CVE-2021-27044

Autodesk FBX Review 1.4.0 is affected by an Out-of-Bounds Read/Write vulnerability in FBX file parsing that can lead to remote code execution or information disclosure. Multiple connected sources corroborate a memory corruption issue when parsing FBX content, exploitable via malicious DLLs, with ...

The vulnerability of the Zscaler Client Connector software is caused by a DLL hooking mechanism that allows a hacker to execute arbitrary code.

The vulnerability of the Zscaler Client Connector software is caused by a DLL hijacking. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Adobe Acrobat < 2017.011.30202 / 2020.004.30015 / 2021.007.20091 Multiple Vulnerabilities (APSB21-55)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2017.011.30202, 2020.004.30015, or 2021.007.20091. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199...

Security Bulletin: Multiple vulnerabilities in IBM DB2 affect the IBM Intelligent Operations Center (CVE-2020-4701, CVE-2020-4739)

Summary Multiple vulnerabilities have been identified in DB2 11.1 which is shipped with IBM® Intelligent Operations Center. Information about these vulnerabilities affecting IBM® Intelligent Operations Center have been published and addressed the applicable CVEs. Vulnerability Details CVEID:...

Python 3.6.x < 3.6.11, 3.7.x < 3.7.7, 3.8.x < 3.8.2 Python Issue (bpo-39401) - Windows

Python CPython on Windows 7 is prone to an uncontrolled search path vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Exploit for Path Traversal in Microsoft

CVE-2021-40444 PoC Malicious docx generator to exploit CVE-20...

Vulnerability fixed in AVEVA System Platform

A vulnerability has been fixed in Platform Common Services PCS Portal which is a component of AVEVA System Platform. It concerns a certain "DLL hijacking" vulnerability. A local malicious person could potentially exploit the vulnerability to execute arbitrary code execute with the privileges of t...

AVEVA System Platform 代码问题漏洞

AVEVA System Platform is an application from AVEVA UK. A responsive, standards-driven and scalable foundation for regulatory, enterprise SCADA, MES and IIoT applications. A code issue vulnerability exists in the AVEVA System Platform Common Services PCS Portal, which stems from the vulnerability ...

AVEVA PCS Portal

1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION: Low attack complexity Vendor: AVEVA Equipment: Platform Common Services PCS Portal Vulnerability: Uncontrolled Search Path Element 2. RISK EVALUATION The DLL hijacking vulnerability in the Platform Common Services PCS Portal, if exploited, could allow...

CVE-2021-36216

LINE for Windows 6.2.1.2289 and before allows arbitrary code execution via malicious DLL injection...

Design/Logic Flaw

LINE for Windows 6.2.1.2289 and before allows arbitrary code execution via malicious DLL injection...

CVE-2021-36216

The CVE-2021-36216 entry applies to LINE for Windows, affected in version 6.2.1.2289 and earlier. The root cause is a DLL injection flaw that permits arbitrary code execution. The vulnerability is described as local (attack vector LOCAL) with low attack complexity, and could lead to partial confi...

This New Malware Family Using CLFS Log Files to Avoid Detection

Cybersecurity researchers have disclosed details about a new malware family that relies on the Common Log File System CLFS to hide a second-stage payload in registry transaction files in an attempt to evade detection mechanisms. FireEye's Mandiant Advanced Practices team, which made the discovery...

Design/Logic Flaw

Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.3.0 and prior allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory...

OSV-2021-1160 Heap-buffer-overflow in pe_valid_dll_name

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37443 Crash type: Heap-buffer-overflow READ 1 Crash state: pevaliddllname peparsedelayimportdllname peparsedelayedimports...

CVE-2021-38469

Many of the services used by the affected product do not specify full paths for the DLLs they are loading. An attacker can exploit the uncontrolled search path by implanting their own DLL near the affected product’s binaries, thus hijacking the loaded DLL...

Siemens JT2Go < 13.2.0.2 Multiple Vulnerabilities (SSA-938030)

The version of Siemens JT2Go installed on the remote Windows hosts is prior to 13.2.0.2. It is, therefore, affected by multiple vulnerabilities, including the following: - An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Open Design Alliance...

CVE-2021-3633

A DLL preloading vulnerability was reported in Lenovo Driver Management prior to version 2.9.0719.1104 that could allow privilege escalation...

Privilege escalation

A DLL preloading vulnerability was reported in Lenovo Driver Management prior to version 2.9.0719.1104 that could allow privilege escalation...

CVE-2021-3633

CVE-2021-3633 affects Lenovo Driver Management. A DLL preloading vulnerability in Lenovo Driver Management prior to version 2.9.0719.1104 could allow privilege escalation. Affected component: Lenovo Driver Management (Windows). Root cause: DLL preloading. Impact: privilege escalation if exploited...