Design/Logic Flaw

Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.2.0.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2265

CVE-2017-2265 affects FileCapsule Deluxe Portable, with vulnerable versions 1.0.4.1 and earlier. The issue is an untrusted search path vulnerability that enables arbitrary code execution by loading a Trojan horse DLL from an unspecified directory, gaining the privileges of the user invoking the a...

CVE-2017-2266

Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2270

The CVE-2017-2270 issue affects FileCapsule Deluxe Portable and its Encrypted files in self-decryption format, with Vulnerability in DLL loading (CWE-427) that can allow arbitrary code execution. Affected versions include FileCapsule Deluxe Portable Ver.2.0.9 and earlier (and related encrypted-se...

CVE-2017-2269

The CVE-2017-2269 issue affects FileCapsule Deluxe Portable Ver.2.0.9 and earlier, described as an untrusted search path vulnerability where a Trojan DLL in an unspecified directory can be loaded to gain privileges. Multiple connected sources indicate this could allow arbitrary code execution wit...

CVE-2017-2270

Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.2.0.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2267

Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.5.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2266

CVE-2017-2266 concerns FileCapsule Deluxe Portable and its Encrypted Files in Self-Decryption Format. The vulnerability is an untrusted search path that could allow arbitrary code execution via a Trojan horse DLL loaded from an unspecified directory, with impact as described in the CVE records. A...

CVE-2017-2268

CVE-2017-2268 affects FileCapsule Deluxe Portable and its “Encrypted files in self-decryption format.” The vulnerability is an untrusted search path/ DLL loading issue (CWE-427) that could allow arbitrary code execution by loading a Trojan horse DLL from an unspecified directory, with the attack ...

CVE-2017-2267

Consolidated data confirms CVE-2017-2267 affects FileCapsule Deluxe Portable Ver.1.0.5.1 and earlier and is an untrusted search path vulnerability (CWE-427) where a Trojan horse DLL in an unspecified directory can be loaded to escalate privileges. Affected component is the DLL loading mechanism o...

JVN#42031953: FileCapsule Deluxe Portable and Encrypted Files in Self-Decryption Format created by FileCapsule Deluxe Portable may insecurely load Dynamic Link Libraries

FileCapsule Deluxe Portable is a file encryption software. FileCapsule Deluxe Portable contains the following vulnerabilities. FileCapsule Deluxe Portable insecurely load Dynamic Link Libraries CWE-427 - CVE-2017-2265, CVE-2017-2267, CVE-2017-2269 Version| Vector| Score ---|---|--- CVSS v3|...

Drupal Autocomplete Deluxe Module Cross-Site Scripting Vulnerability

Drupal is the Drupal community maintained by a set of free , open source content management system developed in PHP language . Autocomplete Deluxe is one of the modules based on the JQuery UI autocomplete for the classification field to create a new widget . A cross-site scripting vulnerability...

Autocomplete Deluxe - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2017-003

This module creates a new widget for taxonomy fields based on JQuery UI autocomplete. The module doesn't sufficiently escape the entered taxonomy terms thereby exposing a Cross Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact that an attacker must have the permission ...

Air Hockey Deluxe - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Air Hockey Deluxe published at the 'play' market has multiple vulnerabilities...

Tower of Hanoi Deluxe - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Tower of Hanoi Deluxe published at the 'play' market has multiple vulnerabilities...

Throwing Knife deluxe - Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Throwing Knife deluxe published at the 'play' market has multiple vulnerabilities...

Crossbow Shooting deluxe - Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Crossbow Shooting deluxe published at the 'play' market has multiple vulnerabilities...

Mahjong Deluxe - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Mahjong Deluxe published at the 'play' market has multiple vulnerabilities...