Installer of Trend Micro Security 2020 (Consumer) may insecurely load Dynamic Link Libraries

Overview Installers of Trend Micro Security 2020 Consumer family may insecurely load Dynamic Link Libraries. Multiple products provided by Trend Micro Incorporated contain the DLL search path issue, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Trend Micro Incorporated...

PT-2024-7533 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to a Use-After-Free vulnerability in the libodxdll.dll library when parsing a maliciously crafted MODEL file in Autodesk AutoCAD. This can be exploited by a...

CVE-2024-6618

In Ocean Data Systems Dream Report, a path traversal vulnerability could allow an attacker to perform remote code execution through the injection of a malicious dynamic-link library DLL...

AMD μProf 代码问题漏洞

AMD μProf is a software analysis tool from Ultra Micro Semiconductor AMD. AMD μProf suffers from a code issue vulnerability that stems from the presence of a DLL hijacking vulnerability that could allow an attacker to achieve elevation of privilege, which could lead to arbitrary code execution...

PT-2024-38050 · Okta · Okta Verify For Windows

Name of the Vulnerable Software and Affected Versions: Okta Verify for Windows versions prior to 5.0.2 Description: The issue concerns a privilege escalation vulnerability through DLL hijacking. The vulnerability is fixed in version 5.0.2. Recommendations: For versions prior to 5.0.2, upgrade to...

PT-2024-8348 · Aveva · Aveva Reports For Operations

Name of the Vulnerable Software and Affected Versions: Dream Report versions affected versions not specified AVEVA Reports for Operations versions affected versions not specified Description: The issue is related to errors in processing relative path to directory, which could allow an attacker to...

CVE-2024-1182

Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric MC Works64 all versions, Mitsubishi Electri...

Mitsubishi Electric MC Works64 Code Issue Vulnerability

Mitsubishi Electric MC Works64 is a data acquisition and monitoring system SCADA from Mitsubishi Electric Japan. A code issue vulnerability exists in Mitsubishi Electric MC Works64, which stems from an uncontrolled search path element vulnerability that allows a local attacker to execute maliciou...

Autodesk AutoCAD 缓冲区错误漏洞

Autodesk AutoCAD is a set of professional 3D drawing software from the American Autodesk Corporation. A memory misreference vulnerability exists in Autodesk AutoCAD version 2024.1.4, which originates when the Autodesk application parses a maliciously crafted XB file in pskernel.DLL, which can be...

CORSAIR iCUE Security Vulnerabilities

CORSAIR iCUE is a PC monitoring and RGB lighting control software from CORSAIR. It allows you to control and customize compatible RGB lighting devices, fans, keyboards, mice, headphones, and more. A security vulnerability exists in CORSAIR iCUE version 5.9.105 that originates from allowing an...

The vulnerability of the server logs for Centum Cams in distributed control systems CENTUM CS 3000 and CENTUM VP allows a intruder to execute arbitrary code.

The vulnerability of the server logs of Centum Cams for distributed control systems CENTUM CS 3000 and CENTUM VP relates to access control errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with SYSTEM privileges by replacing the legitimate DLL file with a...

The vulnerability of the binary file control system of the software-hardware protection complex ViPNet Client allows a perpetrator to execute arbitrary code with administrator privileges.

The vulnerability of the binary file control system of the ViPNet Client software lies in the lack of access control mechanisms. Exploiting this vulnerability allows an attacker to execute arbitrary code with administrator privileges using a specially crafted DLL file placed in the ViPNet Client...

PT-2024-5619 · Dell · Dell Peripheral Manager

Name of the Vulnerable Software and Affected Versions: Dell Peripheral Manager versions prior to 1.7.6 Description: The issue is related to an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious DLL or symbolic link...

Apiris Kafeo 安全漏洞

Apiris Kafeo is a software solution from the French company Apiris. A security vulnerability exists in Apiris Kafeo version 6.4.4 that stems from a DLL hijacking issue...

CVE-2021-22280

Improper DLL loading algorithms in B&R Automation Studio versions =4.0 and 4.12 may allow an authenticated local attacker to execute code in the context of the product...

B&R Industrial Automation Studio 安全漏洞

B&R Industrial Automation Studio is a suite of integrated development environments IDEs from B&R Industrial Automation, an Austrian company that develops and programs its automation solutions. A security vulnerability exists in B&R Industrial Automation Studio versions prior to 4.12 that stems fr...

SUPERAntiSyware Professional X 安全漏洞

SUPERAntiSyware Professional X is an antivirus software from SUPERAntiSyware. A security vulnerability exists in SUPERAntiSyware Professional X version 10.0.1262 and 10.0.1264, which originated from a vulnerability that allows an unprivileged attacker to elevate privileges by restoring a speciall...

Veritas Technologies Backup Exec 安全漏洞

Veritas Technologies Backup Exec is a powerful suite of data backup recovery tools from Veritas Technologies, USA. With a web-based management console and an intuitive graphical user interface with easy-to-use wizards, the software simplifies the installation process and improves manageability...

CVE-2024-28099

VT STUDIO Ver.8.32 and earlier contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application...

Foxit PDF Reader 安全漏洞

Foxit PDF Reader is a Chinese Foxit Foxit company's a PDF reader.Foxit PDF Editor is a Chinese Foxit Foxit company's a PDF editor Foxit PDF Reader and Editor has an elevation of privilege vulnerability that can be exploited by placing a DLL file in the update-service folder to elevate privileges...