Lucene search
K

925 matches found

Positive Technologies
Positive Technologies
added 2025/02/06 12:0 a.m.2 views

PT-2025-5865 · Unknown · Netmod Vpn Client

Name of the Vulnerable Software and Affected Versions: NetMod VPN Client version 5.3.1 Description: The issue arises due to the improper validation of dynamically loaded libraries, allowing an attacker to execute arbitrary code by placing a malicious DLL in a directory where the application loads...

7.3CVSS8.2AI score0.00106EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2025/01/31 1:15 p.m.0 views

CVE-2025-24830

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39378...

6.3CVSS6.6AI score0.00058EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2025/01/31 1:15 p.m.2 views

CVE-2025-24827

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39378...

6.3CVSS6.6AI score0.00073EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/01/31 12:0 a.m.3 views

PT-2025-5583 · Acronis · Acronis Cyber Protect Cloud Agent

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent Windows versions before build 39378 Description: The issue is related to a local privilege escalation due to a DLL hijacking vulnerability. This allows an attacker to potentially gain elevated privileges on a...

6.3CVSS7.5AI score0.00103EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/01/24 12:0 a.m.2 views

PT-2025-3718 · Toolstick · Toolstick

Name of the Vulnerable Software and Affected Versions: ToolStick affected versions not specified Description: The issue is caused by an uncontrolled search path in the ToolStick installer, leading to DLL hijacking vulnerabilities. This can result in privilege escalation and arbitrary code executi...

8.6CVSS8AI score0.00075EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/01/24 12:0 a.m.1 views

PT-2025-3720 · Silicon · Cp210X Vcp Windows Installer

Name of the Vulnerable Software and Affected Versions: CP210x VCP Windows installer affected versions not specified Description: The issue is caused by an uncontrolled search path in the CP210x VCP Windows installer, leading to DLL hijacking vulnerabilities. This can result in privilege escalatio...

8.6CVSS8AI score0.00075EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/01/21 12:0 a.m.4 views

PT-2025-3122 · Unknown · Rar Extractor - Unarchiver

Name of the Vulnerable Software and Affected Versions: RAR Extractor - Unarchiver Free and Pro version 6.4.0 Description: The issue allows local attackers to inject arbitrary code, potentially leading to remote control and unauthorized access to sensitive user data via the exploit combined.dylib...

5.5CVSS6.9AI score0.02389EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/01/21 12:0 a.m.2 views

MacPaw Way The Unarchiver 安全漏洞

MacPaw Way The Unarchiver is a free decompression software from MacPaw Way that supports many common and older compression formats. A security vulnerability exists in MacPaw Way The Unarchiver version 6.4.0, which originated from a vulnerability that allows an attacker to inject arbitrary code vi...

5.5CVSS7.2AI score0.02389EPSS
Exploits0References4
OSV
OSV
added 2025/01/15 11:15 p.m.0 views

UBUNTU-CVE-2024-55503

An issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a crafted script to the DYLDINSERTLIBRARIES component...

3.3CVSS6.2AI score0.02098EPSS
Exploits0References3
OSV
OSV
added 2025/01/15 5:15 p.m.0 views

CVE-2020-8094

An untrusted search path vulnerability in testinitsigs.exe as used in Bitdefender Antivirus Free 2020 allows a low-privilege attacker to execute code as SYSTEM via a specially crafted DLL file...

7.8CVSS5.9AI score
Exploits0References1
OSV
OSV
added 2025/01/13 10:15 p.m.0 views

CVE-2024-11128

A vulnerability in the BitdefenderVirusScanner binary as used in Bitdefender Virus Scanner for MacOS may allow .dynamic library injection DYLD injection without being blocked by AppleMobileFileIntegrity AMFI. This issue is caused by the absence of Hardened Runtime or Library Validation signing...

7.8CVSS5.8AI score0.00081EPSS
Exploits0References1
NVD
NVD
added 2025/01/13 10:15 p.m.16 views

CVE-2024-11128

A vulnerability in the BitdefenderVirusScanner binary as used in Bitdefender Virus Scanner for MacOS may allow .dynamic library injection DYLD injection without being blocked by AppleMobileFileIntegrity AMFI. This issue is caused by the absence of Hardened Runtime or Library Validation signing...

8.4CVSS0.00081EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.2 views

Bitdefender Virus Scanner 安全漏洞

Bitdefender Virus Scanner is a virus scanner program from Bitdefender. A security vulnerability exists in Bitdefender Virus Scanner versions prior to 3.18, which stems from the lack of a Hardened Runtime or Library Validation signature and may allow dynamic library injection...

8.4CVSS6.8AI score0.00081EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/02 12:0 a.m.1 views

Acronis Cyber Protect 代码问题漏洞

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Switzerland. Combining backup, anti-malware, network security and endpoint management features such as vulnerability assessment, URL filtering, patch management and more. A code issue...

7.8CVSS6.5AI score0.00097EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/02 12:0 a.m.2 views

Acronis Cyber Protect 代码问题漏洞

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Switzerland. Combining backup, anti-malware, network security and endpoint management features such as vulnerability assessment, URL filtering, patch management and more. A code issue...

7.8CVSS7.4AI score0.00101EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2024/12/12 6:57 a.m.1 views

SUSE CVE-2024-54131

The Kolide Agent aka: Launcher is the lightweight agent designed to work with Kolide's service. An implementation bug in the Kolide Agent known as launcher allows for local privilege escalation to the SYSTEM user on Windows 10 and 11. The bug was introduced in version 1.5.3 when launcher started...

7.3CVSS7.2AI score0.00074EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.1 views

Autodesk Revit 代码问题漏洞

Autodesk Revit is a suite of building information modeling software from the American company Autodesk. A security vulnerability exists in Autodesk Revit that stems from the fact that if a maliciously crafted DLL file is placed in the same directory as an RVT file, Autodesk Revit may load the fil...

7.8CVSS7.3AI score0.00411EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/11/28 12:0 a.m.3 views

PT-2024-8959

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric FA Connector SCADA-system GENESIS64 versions 10.97.2 through 10.97.3 ICONICS GENESIS64 versions 10.97.2 through 10.97.3 Description The issue is related to the presence of dead code in the GENESIS64 system, which can be...

7CVSS9.1AI score0.00041EPSS
Exploits0References14
Positive Technologies
Positive Technologies
added 2024/11/27 12:0 a.m.1 views

PT-2024-35500 · Unknown · Iota C.Ai Conversational Platform

Name of the Vulnerable Software and Affected Versions: iota C.ai Conversational Platform versions 1.0.0 through 2.1.3 Description: A code injection vulnerability in the plugin management of iota C.ai Conversational Platform allows remote authenticated users to execute arbitrary system commands vi...

9.3CVSS8.4AI score0.00495EPSS
Exploits0References4
OSV
OSV
added 2024/11/22 10:15 p.m.1 views

CVE-2024-7244

Panda Security Dome VPN DLL Hijacking Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order...

7.8CVSS7.4AI score
Exploits0References1
Rows per page
Query Builder