SUSE-SU-2020:0722-1 Security update for nghttp2

This update for nghttp2 fixes the following issues: nghttp2 was update to version 1.40.0 bsc1166481 - lib: Add nghttp2checkauthority as public API - lib: Fix the bug that stream is closed with wrong error code - lib: Faster huffman encoding and decoding - build: Avoid filename collision of static...

Adaware antivirus elevation of privilege vulnerability

Lavasoft Adaware antivirus is a suite of antivirus software from Lavasoft Canada. A security vulnerability exists in Lavasoft Adaware antivirus versions 12.6.1005.11662 and 12.7.1055.0. The vulnerability can be exploited by an attacker to elevate privileges with the help of a malicious DLL...

Kingsoft Typewriter suffers from dll hijacking vulnerability

Kingsoft Typewriter is a typing software. A dll hijacking vulnerability exists in the Kingsoft Typewriter installer. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

WPS Office Campus Edition suffers from dll hijacking vulnerability

WPS Office Campus Edition is for campuses, teachers, students and other educational users, adding the team function of cloud documents, adding LaTeX formulas, geometric diagrams, mind maps and other professional drawing tools, combining with AI technology, adding thesis checking, super resume,...

Dll Hijacking Vulnerability in Sogou High Speed Browser

Sogou High Speed Browser is developed by Sogou, based on Google chromium kernel, and strives to provide users with a seamless cross-terminal experience, making it easier to surf the Internet and smoother to read web pages. Sogou High Speed Browser has a Dll hijacking vulnerability, which can be...

Baidu Five Strokes Input Method Exploits Dll Hijacking Vulnerability

Baidu 5-stroke Input Method is a Chinese 5-stroke input method software under Baidu. Baidu Five Strokes Input Method suffers from a Dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute arbitrary code...

Foxit PDF Editor Personal Edition Dll Hijacking Vulnerability

Foxit PDF Editor is a pdf editor from Fujian Foxit Software Development Co., Ltd. that allows you to easily modify the content of a PDF document in a WYSIWYG manner for reliable and convenient editing without the need to understand PDF format knowledge. Foxit PDF Editor Personal Edition has a Dll...

DLL Hijacking Vulnerability in Haiwell Cloud Configuration Software

Xiamen Haiwei Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production, sales and service. Haiwell Cloud Configuration Software HaiwellScada has a DLL hijacking vulnerability that can be exploited by placing a specially crafted DLL file on the...

Shanghai Gesi Network Technology Co., Ltd Format Factory suffers from dll installation hijacking vulnerability

Format Factory Format Factory was founded by Shanghai Format Factory Network Co., Ltd. in February 2008, is the Internet software for global users. Ltd. Format Factory has a dll installation hijacking vulnerability, which can be exploited by attackers to cause the user's computer to be...

Baidu Input Method of Beijing Baidu Netcom Technology Co. Ltd. suffers from dll hijacking vulnerability

Baidu Input Method is an input method that integrates handwriting, voice, win10, strokes, mouse handwriting and mobile input method. Ltd. Baidu Input Method has a dll hijacking vulnerability, which can be exploited by attackers to cause a user's computer to be remote controlled or implanted with ...

Trend Micro Vulnerability Protection DLL Sideloading Vulnerability

Trend Micro Vulnerability Protection is an endpoint vulnerability protection product that provides one step faster and stronger endpoint protection. A DLL side-loading vulnerability exists in Trend Micro Vulnerability Protection 2.0. The vulnerability can be exploited by an attacker via the produ...

CVE-2019-14688

Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product installation. The vulnerability was found to ONLY be exploitable during an initial...

CVE-2019-19741

Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation, a different issue than CVE-2019-19247 and CVE-2019-19248. When Origin.exe connects to the named pipe OriginClientService, the privileged service verifies the client's...

CVE-2020-8959

Western Digital WesternDigitalSSDDashboardSetup.exe before 3.0.2.0 allows DLL Hijacking...

Foxit PDF Compression Master DLL Hijacking Vulnerability

Foxit PDF Compression Master is a document compression software. Foxit PDF Compressor has a DLL hijacking vulnerability. An attacker can exploit this vulnerability to load a fake malicious dll file...

Extreme PDF to WORD software suffers from DLL hijacking vulnerability

Extreme PDF to WORD is a PDF to Word converter. Extreme PDF to WORD software has a DLL hijacking vulnerability. An attacker can exploit this vulnerability to load a fake malicious dll file...

DLL Hijacking Vulnerability in NetSarang XSHELL6

Xshell 6 is a Terminal Connection Tool software developed by NetSarang, Inc. NetSarang XSHELL6 suffers from a DLL hijacking vulnerability that can be exploited by attackers to execute arbitrary code...

CVE-2019-6858

A CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator Software Version prior to V1.0.8.1, which could cause privilege escalation when injecting a malicious DLL...

The vulnerability of the device performance information collection application HP Touchpoint Analytics, due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the HP Touchpoint Analytics performance monitoring application relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using malicious DLL files...

Yuetbook PDF Reader has dll hijacking vulnerability

Yue book PDF reader is a PDF reader developed by Shenzhen Evergreen Technology Co. Yueshu PDF dll hijacking vulnerability, an attacker can exploit the vulnerability to execute arbitrary code...