i-SENS SmartLog Diabetes Management Software Code Execution Vulnerability

SmartLog Diabetes Management Software is software used to track and monitor an individual's blood glucose levels by connecting a glucose meter to a computer via USB. A code execution vulnerability exists in i-SENS SmartLog Diabetes Management Software, which allows an attacker to execute arbitrar...

The CRCA User's Software Untrusted Search Path Vulnerability

The CRCA user's Software is a business registration electronic authentication software from the Ministry of Justice in Japan. An untrusted search path vulnerability exists in The CRCA user's Software version 1.8. The vulnerability can be exploited by a remote attacker to gain privileges via a...

CVE-2017-11158

Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in th...

Fuji Xerox ContentsBridge Utility for Windows Installer Search Path Handling Elevation of Privilege Vulnerability

Fuji Xerox ContentsBridge Utility for Windows is a document printing utility for Windows-based platforms. Fuji Xerox ContentsBridge Utility for Windows handles search paths due to a security vulnerability that allows remote attackers to exploit the vulnerability by submitting a specially crafted...

Multiple Fuji Xerox Products Installer Untrusted Search Path Vulnerability

Fuji Xerox DocuCentre-VI and ApeosPort-VI are PCL print drivers for digital laminators. An untrusted search path vulnerability exists in the installer for multiple Fuji Xerox products. Allows an attacker to gain privileges by being in an unknown Trojan DLL directory...

AzeoTech DAQFactory Uncontrolled Search Path Element Vulnerability

AzeoTech DAQFactory is an HMI/SCADA software. AzeoTech DAQFactory suffers from an uncontrolled search path element vulnerability that can be exploited by an attacker to execute a malicious DLL file that has been placed in the search path...

Installer and self-extracting archive containing the installer of "Security Setup Tool" may insecurely load Dynamic Link Libraries

Overview The installer and the self-extracting archive containing the installer of "Security Setup Tool" provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of...

Shin Kinkyuji Houkoku Data Nyuryoku Program Untrustworthy Search Path Vulnerability

Shin Kinkyuji Houkoku Data Nyuryoku Program is a data entry program for basic statistical reports for the petroleum industry from the Agency for Natural Resources and Energy of Ministry, Trade and Industry METI in Japan. Installer is one of the installation programs. An untrusted search path...

Installer of Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program may insecurely load Dynamic Link Libraries

Overview Installer of Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program provided by Agency for Natural Resources and Energy of METI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this...

CVE-2017-9648

An Uncontrolled Search Path Element issue was discovered in Solar Controls WATTConfig M Software Version 2.5.10.1 and prior. An uncontrolled search path element has been identified, which could allow an attacker to execute arbitrary code on a target system using a malicious DLL file...

360 Compressor has an override access vulnerability

360 Compress is a free decompression software from 360. An over-the-horizon access vulnerability exists in 360 Zip. The vulnerability is due to 360zipc.dll writing data to a NULL address, allowing an attacker to exploit the vulnerability to execute code...

CVE-2017-12480

Sandboxie installer 5071703 has a DLL Hijacking or Unsafe DLL Loading Vulnerability via a Trojan horse dwmapi.dll or profapi.dll file in an AppData\Local\Temp directory...

CVE-2017-12414

Format Factory 4.1.0 has a DLL Hijacking Vulnerability because an untrusted search path is used for msimg32.dll, WindowsCodecs.dll, and dwmapi.dll...

Installer of Baidu IME may insecurely load Dynamic Link Libraries

Overview Installer of Baidu IME contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

InternetSoft FTP Commander Untrusted Search Path Vulnerability

InternetSoft FTP Commander is a Windows-based FTP client developed by InternetSoft. A security vulnerability exists in InternetSoft FTP Commander 8.02 and earlier versions. The vulnerability can be exploited by an attacker to hijack a DLL and execute code via a malicious dwmapi.dll file...

Denial of Service Vulnerability in CAJviewer, CAJ Cloud Reader

CAJviewer and CAJ Cloud Reader are specialized full-text format readers for China Journal Network. A denial of service vulnerability exists in CAJviewer, CAJ Cloud Reader when processing caj files. The latest version of ReaderEx.dll dynamic library function fails to determine whether the pointer ...

Installer of LhaForge may insecurely load Dynamic Link Libraries

Overview LhaForge is a file compression/decompression software. The installer of LhaForge contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC coordinated with t...

Lhaz Installer Untrusted Search Path Vulnerability

Lhaz is a compression/decompression tool.Installer is one of the installers. An untrusted search path vulnerability exists in the installer in Lhaz 2.4.0 and earlier versions. An attacker can exploit this vulnerability to gain privileges with a malicious DLL in a directory...

CVE-2017-2247

Untrusted search path vulnerability in Self-extracting archive files created by Lhaz version 2.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2268

Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.1.0.5.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...