CVE-2020-6789

Loading a DLL through an Uncontrolled Search Path Element in the Bosch Monitor Wall installer up to and including version 10.00.0164 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same...

The vulnerability of the installation file FortiClientEMSOnlineInstaller.exe of the Fortinet FortiClient Enterprise Management Server (EMS) allows a perpetrator to execute arbitrary code.

The vulnerability of the installation file FortiClientEMSOnlineInstaller.exe of the Fortinet FortiClient Enterprise Management Server EMS server is related to errors in the path validation mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially...

CVE-2021-20616

Untrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver.16.001.01g allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

The vulnerability of the Adobe Lightroom Classic graphic editor lies in the ability to download a dynamic library that does not exist, allowing attackers to escalate their privileges.

The vulnerability of the Adobe Lightroom Classic graphic editor is related to the loading of a dynamic library that does not exist. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges in the context of the current user...

Western Digital Dashboard Code Issue Vulnerability

Western Digital Dashboard is a hard disk management software from Western Digital USA. The software can be used to analyze ssd including model, capacity, firmware version and smart attributes and firmware updates, and can help users take full advantage of WD SSF's software utility A security...

There is a dll hijacking vulnerability in Youdao Cloud Notes (Windows client)

Youdao Cloud Notes 原有道笔记 is an online library for individuals and teams launched on June 28, 2011 by NetEase's Youdao. A dll hijacking vulnerability exists in Youdao Cloud Notes Windows client. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

Scintillating Light PDF Converter is vulnerable to dll hijacking.

Twinkle Light PDF Converter specializes in PDF conversion software, PDF file converter, including PDF to WORD, PDF to image, image to PDF, PDF to JPG, PDF merger, PDF compression and other related PDF conversion functions. There is a dll hijacking vulnerability in Scintillate PDF Converter. An...

Binary Vulnerability in Tencent QQ Music Windows Client

QQ Music for PC is a free music player, QQ Music for PC provides users with the latest and hottest song resources and music videos for free. A DLL hijacking vulnerability exists in the Tencent QQ Music Windows client, which can be exploited by attackers to gain control of the server...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to authentication process errors, allowing attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to authentication process errors. Exploiting these vulnerabilities can allow a malicious actor to execute arbitrary code in the...

Homework Help Live Classes for windows has dll hijacking vulnerability

Homework Help Live Classes is a high-quality online live tutoring product under Homework Help, which covers all subjects of primary, junior high and senior high school grades. There is a dll hijacking vulnerability in the windows version of Homework Help Live Class. Attackers can use this...

Lovecraft pc client suffers from dll hijacking vulnerability

Aqiyi pc client is a client software that focuses on video playback under Aqiyi. There is a dll hijacking vulnerability in Aqiyi pc client, which can be exploited by attackers to execute arbitrary commands...

MangoTV PC client suffers from dll hijacking vulnerability

Mango TV is a new media audio-visual comprehensive communication service platform with audio-visual interaction as its core, integrating network features and TV features, realizing "multi-screen integration" of exclusive broadcasting, cross-screen and self-producing, and it is also the only...

Nail (Windows client) suffers from dll hijacking vulnerability (CNVD-2020-72473)

Nail is an intelligent mobile office platform. A dll hijacking vulnerability exists in Nail Windows client. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

Ape Tutoring (Windows client) suffers from a dll hijacking vulnerability

Ape Tutoring is online tutoring software for all subjects in elementary, middle and high school. Ape Tutoring Windows client suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

Maxthon Browser (Windows Client) suffers from a dll hijacking vulnerability

Maxthon is a web browser. A dll hijacking vulnerability exists in Maxthon Browser Windows client. An attacker can exploit this vulnerability to execute malicious code...

YY Voice suffers from dll hijacking vulnerability (CNVD-2020-73407)

YY Voice is a team voice communication platform. YY Voice suffers from a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

Himalaya (Windows client) suffers from dll hijacking vulnerability

Himalaya is an audio sharing platform. A dll hijacking vulnerability exists in Himalaya Windows client, which can be exploited by an attacker to load a malicious dll and execute malicious code...

dll hijacking vulnerability in Aiki (Windows client)

Aqiyi Windows client is a free, high-definition video entertainment client created by Aqiyi website www.iqiyi.com specifically for Windows users. Aqiyi Windows Client suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to execute malicious code...

Hochen CAD 2021 (Windows Client) suffers from dll hijacking vulnerability

Hochen CAD 2021 is a 3D design assistance software. A dll hijacking vulnerability exists in Hao Chen CAD 2021 Windows client. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

IBM DB2 Arbitrary Code Execution Vulnerability

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM DB2 suffers from an arbitrary code execution vulnerability that can be exploited by an attacker to...