September 2018 Preview of the Quality Rollups for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows Server 2012 (KB 4458612)

September 2018 Preview of the Quality Rollups for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows Server 2012 KB 4458612 This also applies to: Microsoft .NET Framework 3.5 Notice This update is included in the Security and Quality Rollup that's dated October 9, 201...

CVE-2018-11072

Dell Digital Delivery versions prior to 3.5.1 contain a DLL Injection Vulnerability. A local authenticated malicious user with advance knowledge of the application workflow could potentially load and execute a malicious DLL with administrator privileges...

Intel Data Center Migration Center Software software installer DLL injection vulnerability

Intel Data Center Migration Center Software is a set of data center migration software from Intel Corporation in the U.S. The software installer is its installer. A DLL injection vulnerability exists in the software installer in Intel Data Center Migration Center Software 3.1 and earlier versions...

CVE-2018-0648

Untrusted search path vulnerability in installer of ChatWork Desktop App for Windows 2.3.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0623

Untrusted search path vulnerability in Multiple Yayoi 17 Series products Yayoi Kaikei 17 Series Ver.23.1.1 and earlier, Yayoi Aoiro Shinkoku 17 Ver.23.1.1 and earlier, Yayoi Kyuuyo 17 Ver.20.1.4 and earlier, Yayoi Kyuuyo Keisan 17 Ver.20.1.4 and earlier, Yayoi Hanbai 17 Series Ver. 20.0.2 and...

Code injection

Kaizen Asset Manager Enterprise Edition and Training Manager Enterprise Edition allow a remote attacker to achieve arbitrary code execution via file impersonation. For example, a malicious dynamic-link library dll assumed the identity of a temporary tmp file isxdl.dll and an executable file assum...

CVE-2018-16545

Kaizen Asset Manager Enterprise Edition and Training Manager Enterprise Edition allow a remote attacker to achieve arbitrary code execution via file impersonation. For example, a malicious dynamic-link library dll assumed the identity of a temporary tmp file isxdl.dll and an executable file assum...

CVE-2018-5235

Norton Utilities prior to 16.0.3.44 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, it will...

CVE-2018-5238

Norton Power Eraser prior to 5.3.0.24 and SymDiag prior to 2.1.242 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the...

DLL Hijacking Vulnerability in GE iFix scu.exe Component

GE Intelligent Platforms' GE-IP iFIX is the world's leading industrial automation software solution that provides process visualization, data acquisition and data monitoring of manufacturing operations. A DLL hijacking vulnerability exists in the GE iFix scu.exe component, which can be exploited ...

DLL Hijacking Vulnerability in GE iFix workspace.exe Component

GE Intelligent Platforms' GE-IP iFIX is the world's leading industrial automation software solution that provides process visualization, data acquisition and data monitoring of manufacturing operations. A DLL hijacking vulnerability exists in the GE iFix workspace.exe component, which can be...

Adobe Creative Cloud Desktop Application DLL Load Local Elevation of Privilege Vulnerability

Adobe Creatie Cloud Desktop is a suite of applications for managing applications and services in the Creative Cloud Membership Management Center from Adobe USA. The program supports synchronizing and sharing files, managing fonts, and accessing asset libraries for commercial photography and desig...

Adobe Connect Add-in Installer DLL Load Local Privilege Escalation Vulnerability

Adobe Connect Add-in is a set of enterprise-level web communication solutions from Adobe, Incorporated. The program offers web conferencing, e-learning, and webinars.Installer is the installation program for Adobe Connect Add-in. A security vulnerability exists in Adobe Connect Add-in Installer...

LOGICOOL CONNECTION UTILITY SOFTWARE Untrusted Search Path Vulnerability

LOGICOOL CONNECTION UTILITY SOFTWARE is a suite of software from the Swedish company LOGICOOL for restoring the connection of Logitech devices to non-Unifying wireless receivers. An untrusted search path vulnerability exists in LOGICOOL CONNECTION UTILITY SOFTWARE versions prior to 2.30.9, which...

CVE-2018-0619

Untrusted search path vulnerability in the installer of Glarysoft Glary Utilities Glary Utilities 5.99 and earlier and Glary Utilities Pro 5.99 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0620

Untrusted search path vulnerability in LOGICOOL Game Software versions before 8.87.116 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-13102

AnyDesk before "12.06.2018 - 4.1.3" on Windows 7 SP1 has a DLL preloading vulnerability...

NTT WEST FLET'S VIRUS CLEAR Easy Setup & Application Tool and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool installer untrusted search path vulnerability

NTT WEST FLET'S VIRUS CLEAR Easy Setup & Application Tool and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool are both installation and configuration tools for Japan's NIPPON TELEGRAPH AND TELEPHONE NTT WEST's Virus Cleaner application setup & application tool. An untrusted search path...

Microsoft Visual Studio Code installer untrustworthy search path vulnerability

Microsoft Visual Studio Code is a cross-platform source code editor for writing modern web applications and cloud applications that supports OS X, Windows, and Linux platforms from Microsoft, USA. installer is an installer for Visual Studio Code. An untrusted search path vulnerability exists in t...

LINE for Windows Untrusted Search Path Vulnerability

LINE for Windows is a suite of live chat software. An untrusted search path vulnerability exists in LINE for Windows. The vulnerability can be exploited to gain privileges with the help of a malicious DLL in the directory...