13087 matches found
CVE-2015-8264
Untrusted search path vulnerability in F-Secure Online Scanner allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as F-SecureOnlineScanner.exe...
CVE-2015-8264
Untrusted search path vulnerability in F-Secure Online Scanner allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as F-SecureOnlineScanner.exe...
CVE-2015-8264
CVE-2015-8264 describes an untrusted search path vulnerability in F-Secure Online Scanner, enabling DLL hijacking via a Trojan horse DLL placed in the same folder as F-SecureOnlineScanner.exe. The vulnerability allows arbitrary code execution and is characterized as a local attack with the potent...
Design/Logic Flaw
Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S, NFC Port Software Version 5.3.6.7 and earlier for RC-S320, RC-S310/J1C, RC-S310/ED4C, PC/SC Activator for Type B Ver.1.2.1.0 and earlier, SFCard Viewer ...
Design/Logic Flaw
Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2279
Untrusted search path vulnerability in Tween Ver1.6.6.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2287
Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2287
CVE-2017-2287 affects Sony’s NFC Port Software remover (Ver. 1.3.0.1 and earlier). The issue is an insecure DLL search path (CWE-427) in the DLL loading process, allowing arbitrary code execution with the user’s privileges if exploited. Affected component: NFC Port Software remover executable; ro...
CVE-2017-2286
Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S, NFC Port Software Version 5.3.6.7 and earlier for RC-S320, RC-S310/J1C, RC-S310/ED4C, PC/SC Activator for Type B Ver.1.2.1.0 and earlier, SFCard Viewer ...
CVE-2017-2288
Untrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2288
CVE-2017-2288 refers to an untrusted DLL search path in LhaForge versions up to 1.6.5, caused by insecure DLL loading during installer execution. The underlying issue (CWE-427) allows arbitrary code execution with the invoking user’s privileges when the installer runs. Affected product: LhaForge ...
CVE-2017-2279
CVE-2017-2279 affects Tween Ver1.6.6.0 and earlier, with an untrusted DLL search path vulnerability that allows a Trojan-horse DLL to be loaded, granting an attacker privileges via the installer process. The root cause is insecure DLL loading during installation (DLL search path). Impact stated i...
CVE-2017-2279
Untrusted search path vulnerability in Tween Ver1.6.6.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
VIT Spider Player Untrusted Search Path Vulnerability
VIT Spider Player is an audio player that supports audio files in MP3, AAC, WMA, OGG and FLAC formats. A security vulnerability exists in VIT Spider Player version 2.5.3. The vulnerability can be exploited by attackers to hijack DLLs with the help of malicious dwmapi.dll, olepro32.dll, dsound.dll...
Microsoft Windows LNK Shortcut File Code Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'LNK Remote Code Execution Vulnerability', 'Description' = %q This module exploits a vulnerability in the handling of Windows Shortcut files .LNK...
Design/Logic Flaw
InternetSoft FTP Commander 8.02 and prior has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll file...
CVE-2017-11748
VIT Spider Player 2.5.3 has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll, olepro32.dll, dsound.dll, or AUDIOSES.dll file...
Design/Logic Flaw
VIT Spider Player 2.5.3 has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll, olepro32.dll, dsound.dll, or AUDIOSES.dll file...
