CVE-2018-5238

Norton Power Eraser prior to 5.3.0.24 and SymDiag prior to 2.1.242 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the...

DLL Hijacking Vulnerability in GE iFix scu.exe Component

GE Intelligent Platforms' GE-IP iFIX is the world's leading industrial automation software solution that provides process visualization, data acquisition and data monitoring of manufacturing operations. A DLL hijacking vulnerability exists in the GE iFix scu.exe component, which can be exploited ...

DLL Hijacking Vulnerability in GE iFix workspace.exe Component

GE Intelligent Platforms' GE-IP iFIX is the world's leading industrial automation software solution that provides process visualization, data acquisition and data monitoring of manufacturing operations. A DLL hijacking vulnerability exists in the GE iFix workspace.exe component, which can be...

Adobe Creative Cloud Desktop Application DLL Load Local Elevation of Privilege Vulnerability

Adobe Creatie Cloud Desktop is a suite of applications for managing applications and services in the Creative Cloud Membership Management Center from Adobe USA. The program supports synchronizing and sharing files, managing fonts, and accessing asset libraries for commercial photography and desig...

Adobe Connect Add-in Installer DLL Load Local Privilege Escalation Vulnerability

Adobe Connect Add-in is a set of enterprise-level web communication solutions from Adobe, Incorporated. The program offers web conferencing, e-learning, and webinars.Installer is the installation program for Adobe Connect Add-in. A security vulnerability exists in Adobe Connect Add-in Installer...

LOGICOOL CONNECTION UTILITY SOFTWARE Untrusted Search Path Vulnerability

LOGICOOL CONNECTION UTILITY SOFTWARE is a suite of software from the Swedish company LOGICOOL for restoring the connection of Logitech devices to non-Unifying wireless receivers. An untrusted search path vulnerability exists in LOGICOOL CONNECTION UTILITY SOFTWARE versions prior to 2.30.9, which...

CVE-2018-0619

Untrusted search path vulnerability in the installer of Glarysoft Glary Utilities Glary Utilities 5.99 and earlier and Glary Utilities Pro 5.99 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0620

Untrusted search path vulnerability in LOGICOOL Game Software versions before 8.87.116 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-13102

AnyDesk before "12.06.2018 - 4.1.3" on Windows 7 SP1 has a DLL preloading vulnerability...

NTT WEST FLET'S VIRUS CLEAR Easy Setup & Application Tool and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool installer untrusted search path vulnerability

NTT WEST FLET'S VIRUS CLEAR Easy Setup & Application Tool and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool are both installation and configuration tools for Japan's NIPPON TELEGRAPH AND TELEPHONE NTT WEST's Virus Cleaner application setup & application tool. An untrusted search path...

Microsoft Visual Studio Code installer untrustworthy search path vulnerability

Microsoft Visual Studio Code is a cross-platform source code editor for writing modern web applications and cloud applications that supports OS X, Windows, and Linux platforms from Microsoft, USA. installer is an installer for Visual Studio Code. An untrusted search path vulnerability exists in t...

LINE for Windows Untrusted Search Path Vulnerability

LINE for Windows is a suite of live chat software. An untrusted search path vulnerability exists in LINE for Windows. The vulnerability can be exploited to gain privileges with the help of a malicious DLL in the directory...

axpdfium untrustworthy search path vulnerability

axpdfium is a PDFium library based on the PDF document viewer plug-ins. An untrustworthy search path vulnerability exists in axpdfium. An attacker can exploit this vulnerability with a malicious DLL in the directory to execute arbitrary code with the privileges of the user running the program...

CVE-2018-0597

Untrusted search path vulnerability in the installer of Visual Studio Code allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0563

Untrusted search path vulnerability in the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.13.0 and earlier versions and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.13.0 and earlier versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecifi...

LINE for Windows may insecurely load Dynamic Link Libraries

Overview LINE for Windows provided by LINE Corporation specifies the path to read DLL when launching software. If a user launches LINE for Windows by clicking the specially crafted link prepared by a remote attacker, it may result in insecurely loading Dynamic Link Libraries CWE-427. LINE...

CVE-2018-11551

AXON PBX 2.02 contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability exists because a DLL file is loaded by 'pbxsetup.exe' improperly...

Code Execution Vulnerability in Beijing Jiezhong FameView Configuration Software

FameView configuration software is Beijing Jiezhong company is a set of many years of engineering applications and service experience, based on the Windows operating system, independent research and development of high-performance configuration monitoring software company, can provide economic...

ESTsoft ALZip Code Execution Vulnerability

ESTsoft ALZip is a compression tool from ESTsoft Korea. A security vulnerability exists in ESTsoft ALZip versions prior to 10.76. The vulnerability can be exploited by a local attacker to execute arbitrary code by creating a malicious .DLL file and installing it in a specific path...

CELSYS CLIP STUDIO PAINT, CLIP STUDIO ACTION and CLIP STUDIO MODELER DLL Search Path Vulnerabilities

CELSYS CLIP STUDIO PAINT, CLIP STUDIO ACTION and CLIP STUDIO MODELER are all products of CELSYS Japan.CELSYS CLIP STUDIO PAINT is a set of tools for making comics and illustrations.CLIP STUDIO ACTION is a set of software for 3D animation. CLIP STUDIO MODELER is a 3D modeling plug-in. A security...