19166 matches found
CVE-2025-27237 DLL injection in Zabbix Agent and Agent 2 via OpenSSL configuration
In Zabbix Agent and Agent 2 on Windows, the OpenSSL configuration file is loaded from a path writable by low-privileged users, allowing malicious modification and potential local privilege escalation by injecting a DLL...
CVE-2025-27237 DLL injection in Zabbix Agent and Agent 2 via OpenSSL configuration
In Zabbix Agent and Agent 2 on Windows, the OpenSSL configuration file is loaded from a path writable by low-privileged users, allowing malicious modification and potential local privilege escalation by injecting a DLL...
CVE-2025-11223
Installer of Panasonic AutoDownloader version 1.2.8 contains an issue with the DLL search path, which may lead to loading a crafted DLL file in the same directory...
CVE-2025-11223
Installer of Panasonic AutoDownloader version 1.2.8 contains an issue with the DLL search path, which may lead to loading a crafted DLL file in the same directory...
CVE-2025-11223
Summary of CVE-2025-11223 : Panasonic AutoDownloader installer for version 1.2.8 contains a DLL search path issue (CWE-427) that may allow loading a crafted DLL file from the same directory. This could enable arbitrary code execution with the privileges of the user invoking the installer. Public ...
CVE-2025-11223
Installer of Panasonic AutoDownloader version 1.2.8 contains an issue with the DLL search path, which may lead to loading a crafted DLL file in the same directory...
Panasonic AutoDownloader 安全漏洞
Panasonic AutoDownloader is an automatic update utility software from Panasonic Corporation Japan. A security vulnerability exists in Panasonic AutoDownloader version 1.2.8, which stems from a DLL search path issue that could lead to loading of specially crafted DLL files...
NTFS File System Code Execution
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
NTFS File System Code Execution
The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2025-59684
DigiSign DigiSigner ONE 1.0.4.60 allows DLL Hijacking...
CVE-2025-57443
FrostWire 6.14.0-build-326 for macOS contains permissive entitlements allow-dyld-environment-variables, disable-library-validation that allow unprivileged local attackers to inject code into the FrostWire process via the DYLDINSERTLIBRARIES environment variable. This allows escalated privileges t...
CVE-2025-57443
FrostWire version 6.14.0-build-326 for macOS is vulnerable to local code injection due to permissive entitlements, specifically allow-dyld-environment-variables and disable-library-validation . An unprivileged local attacker can leverage the DYLD_INSERT_LIBRARIES environment variable to inject ma...
CVE-2025-57443
FrostWire 6.14.0-build-326 for macOS contains permissive entitlements allow-dyld-environment-variables, disable-library-validation that allow unprivileged local attackers to inject code into the FrostWire process via the DYLDINSERTLIBRARIES environment variable. This allows escalated privileges t...
Seagate Toolkit DLL Loading Code Execution
The vulnerability of the Seagate Toolkit software for managing storage devices is related to the loading of unreliable DLL files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ROS-20251002-03
A vulnerability in Microsoft's .NET software platform is related to the closing of the HTTP/3 stream while writing code for an application, resulting in a race condition in response. Exploitation of the vulnerability could allow an attacker, acting remotely, to gain access to sensitive informatio...
SUSE CVE-2022-50425
In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Fix copyxstatetouabi to copy init states correctly When an extended state component is not present in fpstate, but in init state, the function copies from initfpstate via copyfeature. But, dynamic states are not present ...
SUSE CVE-2023-53463
In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Do not reset dql stats on NONFATAL err All ibmvnic resets, make a call to netdevtxresetqueue when re-opening the device. netdevtxresetqueue resets the numqueued and numcompleted byte counters. These stats are used in Byt...
SUSE CVE-2025-39917
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds dynptr write in bpfcryptocrypt Stanislav reported that in bpfcryptocrypt the destination dynptr's size is not validated to be at least as large as the source dynptr's size before calling into the crypto...
CVE-2025-23355
NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and denial of service...