CVE-2020-1458: Untrusted Search Path

A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library DLL files, aka 'Microsoft Office Remote Code Execution Vulnerability'...

PT-2020-3299

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description A remote code execution issue exists due to improper input validation before loading dynamic link library DLL files...

CVE-2020-11081

osquery before version 4.4.0 enables a privilege escalation vulnerability. If a Window system is configured with a PATH that contains a user-writable directory then a local user may write a zlib1.dll DLL, which osquery will attempt to load. Since osquery runs with elevated privileges this enables...

CVE-2020-9100: Uncontrolled Search Path Element

Earlier than HiSuite 10.1.0.500 have a DLL hijacking vulnerability. This vulnerability exists due to some DLL file is loaded by HiSuite improperly. And it allows an attacker to load this DLL file of the attacker's choosing...

PT-2020-10066

Name of the Vulnerable Software and Affected Versions CyMiInstaller322 ActiveX affected versions not specified Description A vulnerability in the CyMiInstaller322 ActiveX component, which is used by MIPLATFORM to download files required for application execution, allows an attacker to download...

CVE-2019-19166

Tobesoft XPlatform v9.1, 9.2.0, 9.2.1 and 9.2.2 have a vulnerability that can load unauthorized DLL files. It allows attacker to cause remote code execution...

CVE-2019-19166: Download of Code Without Integrity Check

Tobesoft XPlatform v9.1, 9.2.0, 9.2.1 and 9.2.2 have a vulnerability that can load unauthorized DLL files. It allows attacker to cause remote code execution...

IBM Tivoli Monitoring Unauthorized Access Vulnerability

IBM Tivoli Monitoring is a set of system monitoring software from IBM in the United States. A security vulnerability exists in IBM Tivoli Monitoring versions 6.3.0 through 630 FP7 including Service Pack. The vulnerability can be exploited by an attacker to load other DLL files located in the same...

CVE-2020-4311: Incorrect Permission Assignment for Critical Resource

IBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system. By placing a specially crafted file, an attacker could exploit this vulnerability to load other DLL files located in the same directory and execute arbitrary code on the system. IBM X-Force ID: 17708...

PT-2020-17993

Name of the Vulnerable Software and Affected Versions IBM Tivoli Monitoring version 6.3.0 Description The issue allows a local attacker to execute arbitrary code on the system by placing a specially crafted file. This enables the attacker to load other DLL files located in the same directory and...

CVE-2020-7490: Untrusted Search Path

A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic V1.1 HotFix 15 and prior and Vijeo Designer V6.9 SP9 and prior, which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product...

PT-2020-2064

Name of the Vulnerable Software and Affected Versions Vijeo Designer Basic versions V1.1 HotFix 15 and prior Vijeo Designer versions V6.9 SP9 and prior Description A vulnerability exists in the software related to untrusted search paths, which could allow an attacker to execute arbitrary code on...

CVE-2020-8096

Untrusted Search Path vulnerability in Bitdefender High-Level Antimalware SDK for Windows allows an attacker to load third party code from a DLL library in the search path. This issue affects: Bitdefender High-Level Antimalware SDK for Windows versions prior to 3.0.1.204...

Malwarebytes Anti-Malware Remote Code Execution (CVE-2019-6739)

A remote code execution vulnerability exists in Malwarebytes Anti-Malware. The vulnerability is due to improper sanitization of user-supplied data which may be passed to the application as an option regarding the DLL loading path. A remote attacker could exploit the vulnerability by enticing a us...

Bitdefender Endpoint Security Tool Code Issue Vulnerability

Bitdefender Endpoint Security Tool is an endpoint security management tool from the Romanian company Bitdefender. A code issue vulnerability exists in the EPSecurityService.exe file in versions prior to Bitdefender Endpoint Security Tools 6.6.11.163. The vulnerability stems from an improper desig...

CVE-2020-8601

Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located in the same directory...

CVE-2020-8601

Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located in the same directory...

CVE-2020-8601

Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located in the same directory...

CVE-2020-8601

Trend Micro Vulnerability Protection 2.0 is affected by a DLL sideloading issue in the product installer that could load other DLL files located in the same directory. The vulnerability arises during installation, enabling local manipulation of loaded DLLs. Available public references describe Tr...

PT-2020-20231

Name of the Vulnerable Software and Affected Versions Trend Micro Vulnerability Protection version 2.0 Description The issue allows an attack to use the product installer to load other DLL files located in the same directory. Recommendations For Trend Micro Vulnerability Protection version 2.0,...