Lucene search
+L

1060 matches found

CNNVD
CNNVD
•added 2025/12/19 12:00 a.m.•27 views

FileZilla 代码问题漏洞

FileZilla is an open source FTP/SFTP client for Windows-based platforms. A code issue vulnerability exists in FileZilla Client version 3.63.1, which stems from a DLL hijacking vulnerability that could lead to remote code execution...

9.8CVSS7.6AI score0.00853EPSS
SaveExploits1References4
CVE
CVE
•added 2025/12/18 7:57 p.m.•27 views

CVE-2023-53937

Hubstaff 1.6.14 is affected by a DLL search order hijacking vulnerability that enables replacing the missing system32 wow64log.dll with a malicious library. An attacker could generate a custom DLL (e.g., via Metasploit) and place it in the system32 directory to obtain a reverse shell when the app...

8.5CVSS5.9AI score0.00224EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2025/12/18 4:15 p.m.•22 views

CVE-2025-64723

Arduino IDE is an integrated development environment. Prior to version 2.3.7, Arduino IDE for macOS was configured with overly permissive security entitlements that could bypass macOS Hardened Runtime protections. This configuration allows attackers to inject malicious dynamic libraries into the...

4.8CVSS0.00125EPSS
SaveExploits0References5
CVE
CVE
•added 2025/12/18 3:15 p.m.•37 views

CVE-2025-64723

Summary: Arduino IDE for macOS prior to 2.3.7 had overly permissive security entitlements that could bypass the macOS Hardened Runtime protections, enabling an attacker to inject malicious dynamic libraries into the process and access all TCC permissions granted to the app. Impact (as stated): by...

4.8CVSS5.9AI score0.00125EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2025/12/18 3:15 p.m.•53 views

CVE-2025-64723 Arduino IDE for macOS has TCC Bypass via Dynamic Library Injection

Arduino IDE is an integrated development environment. Prior to version 2.3.7, Arduino IDE for macOS was configured with overly permissive security entitlements that could bypass macOS Hardened Runtime protections. This configuration allows attackers to inject malicious dynamic libraries into the...

4.8CVSS0.00125EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/12/18 3:15 p.m.•16 views

CVE-2025-64723 Arduino IDE for macOS has TCC Bypass via Dynamic Library Injection

Arduino IDE is an integrated development environment. Prior to version 2.3.7, Arduino IDE for macOS was configured with overly permissive security entitlements that could bypass macOS Hardened Runtime protections. This configuration allows attackers to inject malicious dynamic libraries into the...

4.8CVSS5.9AI score0.00125EPSS
SaveExploits0References5
OSV
OSV
•added 2025/12/18 3:15 p.m.•23 views

CVE-2025-64723 Arduino IDE for macOS has TCC Bypass via Dynamic Library Injection

Arduino IDE is an integrated development environment. Prior to version 2.3.7, Arduino IDE for macOS was configured with overly permissive security entitlements that could bypass macOS Hardened Runtime protections. This configuration allows attackers to inject malicious dynamic libraries into the...

4.8CVSS6.6AI score
SaveExploits0References7
CNVD
CNVD
•added 2025/12/18 12:00 a.m.•30 views

MailEnable Insecure DLL Loading Vulnerability (CNVD-2026-14402)

MailEnable is a Windows-based business e-mail server from MailEnable Australia. MailEnable suffers from an insecure DLL loading vulnerability that can be exploited by an attacker to cause local arbitrary code execution...

8.5CVSS6AI score0.00168EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•5 views

CVE-2025-64723: Incorrect Default Permissions

Arduino IDE is an integrated development environment. Prior to version 2.3.7, Arduino IDE for macOS was configured with overly permissive security entitlements that could bypass macOS Hardened Runtime protections. This configuration allows attackers to inject malicious dynamic libraries into the...

4.8CVSS5.8AI score0.00125EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/12/18 12:00 a.m.•28 views

MailEnable Insecure DLL Loading Vulnerability (CNVD-2026-14399)

MailEnable is a Windows-based business e-mail server from MailEnable Australia. MailEnable suffers from an insecure DLL loading vulnerability that can be exploited by an attacker to cause local arbitrary code execution...

8.5CVSS6AI score0.00171EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/15 2:34 p.m.•12 views

CVE-2025-13665

The System Console Utility for Windows is vulnerable to a DLL planting vulnerability...

6.7CVSS6.9AI score0.0011EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/12 12:00 a.m.•14 views

altera Quartus Prime Standard Edition Design Software 安全漏洞

The altera Quartus Prime Standard Edition Design Software is an FPGA design and development software suite from the US-based altera Corporation. A security vulnerability exists in altera Quartus Prime Standard Edition Design Software, which stems from vulnerability to DLL implantation attacks...

6.7CVSS6.7AI score0.0011EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/12/11 5:02 p.m.•13 views

CVE-2025-34420

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIAM.DLL from its installation directory without sufficient integrity validation or a secure search order. A...

8.5CVSS7.3AI score0.00171EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/11 5:02 p.m.•19 views

CVE-2025-34416

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIPO.DLL from its installation directory without sufficient integrity validation or a secure search order. A...

8.5CVSS7.4AI score0.00171EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/10 6:30 p.m.•15 views

EUVD-2025-202442

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIAU.DLL from its installation directory without sufficient integrity validation or a secure search order. A...

8.5CVSS6.9AI score0.00168EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/12/10 6:30 p.m.•14 views

EUVD-2025-202443

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIAM.DLL from its installation directory without sufficient integrity validation or a secure search order. A...

8.5CVSS6.9AI score0.00171EPSS
SaveExploits0References4
NVD
NVD
•added 2025/12/10 4:16 p.m.•18 views

CVE-2025-34419

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAISM.DLL from its installation directory without sufficient integrity validation or a secure search order. A...

8.5CVSS0.00168EPSS
SaveExploits0References3
NVD
NVD
•added 2025/12/10 4:16 p.m.•19 views

CVE-2025-34422

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIPC.DLL from its installation directory without sufficient integrity validation or a secure search order. A...

8.5CVSS0.00171EPSS
SaveExploits0References3
OSV
OSV
•added 2025/12/10 4:16 p.m.•13 views

CVE-2025-34416

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIPO.DLL from its installation directory without sufficient integrity validation or a secure search order. A...

7.8CVSS6.2AI score0.00171EPSS
SaveExploits0References3
NVD
NVD
•added 2025/12/10 4:16 p.m.•12 views

CVE-2025-34416

MailEnable versions prior to 10.54 contain an unsafe DLL loading vulnerability that can lead to local arbitrary code execution. The MailEnable administrative executable attempts to load MEAIPO.DLL from its installation directory without sufficient integrity validation or a secure search order. A...

8.5CVSS0.00171EPSS
SaveExploits0References3
Rows per page
Query Builder