CVE-2018-18367

Symantec Endpoint Protection Manager SEPM prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use...

CVE-2018-18367

CVE-2018-18367 affects Symantec Endpoint Protection Manager (SEPM) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1, with a DLL preloading vulnerability when the application loads a DLL for execution and a malicious DLL is provided. The entry contains no public details on exploitation in...

Sql injection

Norton Security Windows client prior to 22.16.3 and SEP SBE Windows client prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution an...

CVE-2018-18369

Norton Security Windows client prior to 22.16.3 and SEP SBE Windows client prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution an...

CVE-2018-18369

The CVE-2018-18369 entry describes a DLL Preloading vulnerability affecting Windows clients: Norton Security prior to 22.16.3 and SEP SBE prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22, and SEP-12.1.7484.7002. Root cause is a DLL loading order issue that can allow an attacker to substitute a m...

CVE-2018-18369

Norton Security Windows client prior to 22.16.3 and SEP SBE Windows client prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution an...

RARLAB WinRAR 5.61 - ACE Format Input Validation Remote Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework TODO: add other non-payload files class MetasploitModule 'RARLAB WinRAR ACE Format Input Validation Remote Code Execution', 'Description' = %q In WinRAR versions prior t...

wecon LeviStudio suffers from dll hijacking vulnerability

Ltd. is a high-tech company specializing in the research, development and sales of products in the field of automation. wecon LeviStudio has a dll hijacking vulnerability that can be exploited by attackers to gain device privileges...

RARLAB WinRAR ACE Format Input Validation Remote Code Execution Exploit

In WinRAR versions prior to and including 5.61, there is path traversal vulnerability when crafting the filename field of the ACE format in UNACEV2.dll. When the filename field is manipulated with specific patterns, the destination extraction folder is ignored, thus treating the filename as an...

CVE-2019-2699

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Windows DLL. The supported version that is affected is Java SE: 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. While the vulnerabilit...

Design/Logic Flaw

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Windows DLL. The supported version that is affected is Java SE: 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. While the vulnerabilit...

CVE-2019-2699

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Windows DLL. The supported version that is affected is Java SE: 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. While the vulnerabilit...

CVE-2019-2699

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Windows DLL. The supported version that is affected is Java SE: 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. While the vulnerabilit...

CVE-2019-2699

CVE-2019-2699 affects Oracle Java SE Windows DLL in Java SE 8u202. The vulnerability targets the Java SE Windows DLL component; network-accessible, unauthenticated attackers could compromise Java SE, with potential takeover of the Java runtime and impact to deployed apps. Documented CVSSv3 base s...

CVE-2019-2699

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Windows DLL. The supported version that is affected is Java SE: 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. While the vulnerabilit...

InduSoft Web Studio IMHOST32 suffers from dll hijacking vulnerability

InduSoft Web Studio is a popular automation integration development software. A dll hijacking vulnerability exists in InduSoft Web Studio IMHOST32, which can be exploited by attackers to execute malicious code...

LSIS KGL_WIN local suffers from dll hijacking vulnerability

LS Industrial Electronics is a company that mainly deals with programmable controllers, frequency converter speed controllers, DC motor speed controllers, uninterruptible power supplies, high-voltage electrical appliances, low-voltage electrical appliances, and power electronic equipment. A dll...

SAMSoar Developer suffers from dll hijacking vulnerability

Shenzhen Xianzhong Technology is a national high-tech enterprise specializing in the research and development, production, sales and service of Industry 4.0 core products. SAMSoar Developer has a dll hijacking vulnerability when processing ssp files, which can be exploited by attackers to load...

SoMachine HVAC suffers from dll hijacking vulnerability

SoMachine HVAC is PLC programming software. SoMachine HVAC suffers from a dll hijacking vulnerability when processing ppjs, ppjx files, which can be exploited by an attacker to load a malicious dll and execute malicious code...

Oracle Java SE 1.7.0_221 / 1.8.0_211 / 1.11.0_3 / 1.12.0_1 Multiple Vulnerabilities (Apr 2019 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 7 Update 221, 8 Update 211, 11 Update 3, or 12 Update 1. It is, therefore, affected by multiple vulnerabilities related to the following components : - 2D - Libraries - RMI - Windows DLL Nessu...