1232 matches found
schneider Proclima suffers from dll hijacking vulnerability
schneider Proclima is a thermal calculation software. A dll hijacking vulnerability exists in schneider Proclima. An attacker can load a malicious dll and execute malicious code...
CVE-2018-18369
Norton Security Windows client prior to 22.16.3 and SEP SBE Windows client prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution an...
Tencent video pc client software suffers from command execution vulnerability
Tencent Video is an online video platform that provides users with a high-definition and smooth video entertainment experience. Tencent Video pc client software has a command execution vulnerability, the software PC client can allow an attacker to inject an executable DLL file into the client...
Command Execution Vulnerability in Tencent QQ pc Client Software
QQ, short for Tencent QQ, is an Internet-based instant messaging IM software developed by Tencent. A command execution vulnerability exists in the Tencent QQ pc client software, where the software PC client can allow an attacker to inject executable DLL files into the client process to perform...
Command execution vulnerability in wps2019 personal pc client software
WPS Office official website is Kingsoft's office software learning and sharing site, is permanently free of charge to the individual domestic office software. Software PC client can allow attackers to inject executable DLL files in the client process. Execute any function...
Command Execution Vulnerability in Youku Video PC Client Software
Youku is a video platform under the Big Youku Business Group of Alibaba Culture & Entertainment Group. A command execution vulnerability exists in the Youku Video pc client software, which allows an attacker to inject an executable DLL file into the client process to perform arbitrary functions...
Screencom Human LIBCOMMUV2 suffers from dll hijacking vulnerability
Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. Pingtong HMI LIBCOMMUV2 suffers from a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...
CVE-2019-6553
A vulnerability was found in Rockwell Automation RSLinx Classic versions 4.10.00 and prior. An input validation issue in a .dll file of RSLinx Classic where the data in a Forward Open service request is passed to a fixed size buffer, allowing an attacker to exploit a stack-based buffer overflow...
The installer of Microsoft Teams may insecurely load Dynamic Link Libraries
Overview The installer of Microsoft Teams contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Microsoft states that the root cause of this vulnerability is "Application Directory App Dir DLL planting", thus there is no plan to release a...
The vulnerability of the Visual Studio C++ Redistributable installation program allows a perpetrator to execute arbitrary code.
The vulnerability of the Visual Studio C++ Redistributable software installation program is related to incorrect handling of the search path. Exploiting this vulnerability could allow an attacker to execute arbitrary code using the malicious DLL library...
CVE-2018-18913
Opera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker can send a ZIP archive composed of an HTML page along with a malicious DLL to the target. Once the document is opened, it may allow the attacker to take full control of the system from any location...
Microsoft Visual Studio RCE Vulnerability (Mar 2019)
This host is missing an important security update according to Microsoft Security Update March-2019. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Microsoft Visual Studio Remote Code Execution Vulnerability (CNVD-2019-07333)
Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. A remote code execution vulnerability exists in Microsoft Visual Studio 2017 15.9 that stems from th...
Go DLL Injection Vulnerability
Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google. An injection vulnerability exists in Google Go 1.12 and earlier versions for Windows platforms, which stems from the program incorrectly using the LoadLibrary function. An attacke...
Lovecraft Video pc client software has dll file loading vulnerability
Aqiyi Video is a client software under Aqiyi that focuses on video playback. The Aiki Video pc client software suffers from a dll file loading vulnerability, which can be exploited by an attacker to execute an arbitrary code DLL file on the target system using malware...
Kudou Music Box PC client software suffers from a dll file loading vulnerability
Kudou Music Box is a music resource aggregator and player that combines the functions of song and MV search, download, online playback, lyrics synchronization display and so on. A dll file loading vulnerability exists in the Kudou Music Box PC client software, which can be exploited by attackers ...
Rockwell Automation RSLinx Classic Buffer Overflow Vulnerability
Rockwell Automation RSLinx Classic is a factory communications solution from Rockwell Automation. The solution supports access to RockwellSoftware, Allen-Bradley applications, etc. via Allen-Bradley programmable controllers. A stack buffer overflow vulnerability exists in the .dll file in Rockwel...
Microsoft Teams Dynamic Link Library Unsafe Loading Vulnerability
Microsoft Teams is a unified communications platform that combines continuous workplace chat, video conferencing, file storage and application integration. An unsafe loading of dynamic link libraries vulnerability exists in the Microsoft Teams installer. An attacker could exploit the vulnerabilit...
Microsoft Windows 7 Dynamic Link Library Unsafe Loading Vulnerability
Windows 7 is an operating system developed by Microsoft with the kernel version number Windows NT 6.1. Microsoft Windows 7 suffers from an insecure loading of dynamic link libraries vulnerability. An attacker can exploit this vulnerability to execute arbitrary code via specially crafted DLL files...
