CVE-2017-9661

An Uncontrolled Search Path Element issue was discovered in SIMPlight SCADA Software version 4.3.0.27 and prior. The uncontrolled search path element vulnerability has been identified, which may allow an attacker to place a malicious DLL file within the search path resulting in execution of...

CVE-2017-9648

An Uncontrolled Search Path Element issue was discovered in Solar Controls WATTConfig M Software Version 2.5.10.1 and prior. An uncontrolled search path element has been identified, which could allow an attacker to execute arbitrary code on a target system using a malicious DLL file...

SIMPlight SCADA Software DLL Load Local Code Execution Vulnerability

SIMPlight SCADA is software for building management systems and automation equipment. SIMPlight SCADA Software suffers from a DLL Load Native Code Execution vulnerability that could be exploited by an attacker to submit a special file to trick a user into requesting and elevating privileges...

Solar Controls Heating Control Downloader DLL Load Local Code Execution Vulnerability

Solar Controls Heating Control Downloader HCDownloader is a solar control heating downloader from Solar Controls, Czech Republic. A security vulnerability exists in Solar Controls HCDownloader versions 1.0.1.15 and earlier. An attacker can exploit this vulnerability by using a malicious DLL file ...

Solar Controls WATTConfig M Software DLL Load Local Code Execution Vulnerability

Solar Controls WATTConfig M Software is a suite of software for use in Solar Controls devices from Solar Controls, Czech Republic. A security vulnerability exists in Solar Controls WATTConfig M Software version 2.5.10.1 and earlier. The vulnerability can be exploited by an attacker to execute...

Sandboxie installer DLL hijacking vulnerability

Sandboxie is a virtualization software from the American company Sandboxie Holdings. The software supports running other applications in an isolated space and prevents programs from making changes to the system.Sandboxie installer is an installer for Sandboxie. A DLL hijacking vulnerability exist...

IP Messenger for Win Untrustworthy Search Path Vulnerability

IP Messenger for Win is a suite of instant messaging software for LANs based on the Windows platform.Install is one of the installation programs. An untrusted search path vulnerability exists in the installer in IP Messenger for Win versions 4.60 and earlier. A remote attacker can exploit this...

CVE-2017-2288

Untrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

WPS Text wpsmain.dll has a null pointer reference denial of service vulnerability

WPS is an office software developed by Kingsoft Office Software. WPS text wpsmain.dll has a null pointer reference denial of service vulnerability. The vulnerability is due to the program failed to assign a value to the pointer, an attacker can use this vulnerability can lead to a denial of servi...

Installer of Tween Untrustworthy Search Path Vulnerability

Tween is a client tool for Twitter. An untrustworthy search path vulnerability exists in Tween 1.6.6.0 and earlier versions. An attacker can exploit this vulnerability to gain privileges with a malicious DLL...

CVE-2017-2265

Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2269

Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.2.0.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Mozilla Thunderbird < 52.2

The version of Thunderbird installed on the remote Windows host is prior to 52.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-17 advisory. - A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads...

Denshinouhin Check System Untrusted Search Path Vulnerability

Denshinouhin Check System is an e-na inspection system released by the Japanese Ministry of Agriculture, Forestry and Fisheries.Installer is one of the installation programs. An untrusted search path vulnerability exists in the installer in Denshinouhin Check System version 9.0.001.001 and versio...

MLIT DenshiSeikabutsuSakuseiShienKensa system untrustworthy search path vulnerability

An untrusted search path vulnerability exists in the MLIT DenshiSeikabutsuSakuseiShienKensa system. An attacker can exploit this vulnerability with a malicious DLL to gain privileges...

Charamin OMP Untrustworthy Search Path Vulnerability

Charamin OMP is a media player that automatically generates dance animations by analyzing music files. An untrustworthy search path vulnerability exists in Charamin OMP versions 1.1.7.4 and earlier and 1.2.0.0 Beta and earlier. An attacker can exploit this vulnerability to gain privileges with th...

Installer of CASL II simulator untrustworthy search path vulnerability

CASL II simulator is a CASL II an assembly language simulator from Information Technology Promotion Agency ITPA, Japan.Installer is one of the installation programs. An untrusted search path vulnerability exists in the Installer of CASL II simulator. The vulnerability can be exploited by an...

Shinseiyo Sogo Soft Untrustworthy Search Path Vulnerability

Shinseiyo Sogo Soft is an online registration application system released by the Japanese Ministry of Justice.Installer is one of the installation programs. An untrusted search path vulnerability exists in the installer in Shinseiyo Sogo Soft 4.8A and earlier versions. An attacker can exploit thi...

CVE-2017-2229

Untrusted search path vulnerability in Douroshisetu Kihon Data Sakusei System Ver1.0.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2233

Untrusted search path vulnerability in Installer of PDF Digital Signature Plugin G2.30 and earlier, distributed till June 29, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...