Eaton 9000XDrive has a dll hijacking vulnerability

Eaton is a power management company and 9000XDrive is an inverter commissioning software. Eaton 9000XDrive suffers from a dll hijacking vulnerability that can be exploited by an attacker to load a malicious dll to execute malicious code...

Shenzhen Xunlei Network Technology Co., Ltd Xunlei Quickbird has dll hijacking vulnerability

Founded in 2003, Shenzhen Xunlei Network Technology Co., Ltd. is a shared computing and blockchain technology innovation enterprise. Shenzhen Xunlei Network Technology Co., Ltd Xunlei Quickbird suffers from a dll hijacking vulnerability, which can be exploited by an attacker to load a malicious d...

Security Bulletin: Multiple vulnurabilities discovered in IBM® SDK, Java™ can affect Rational Software Architect Design Manager

Summary Multiple vulnerabilies in Java SE version 7 and 8 listed below have been disclosed and can be applicable to RSA DM installations. Vulnerability Details CVEID: CVE-2020-2604 DESCRIPTION: An unspecified vulnerability in Java SE could allow an unauthenticated attacker to take control of the...

Shenzhen Xunlei Network Technology Co., Ltd Xunlei X has dll hijacking vulnerability

Founded in 2003, Shenzhen Xunlei Network Technology Co., Ltd. is a shared computing and blockchain technology innovation enterprise. Shenzhen Xunlei Network Technology Co., Ltd Xunlei X suffers from a dll hijacking vulnerability, which can be exploited by an attacker to load a malicious dll and...

Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect IBM StoredIQ

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition used by IBM StoredIQ. IBM StoredIQ has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-2604 DESCRIPTION: An unspecified vulnerability in Java SE could allow an unauthenticated attacker to take...

CVE-2019-3613

DLL Search Order Hijacking vulnerability in McAfee Agent MA prior to 5.6.4 allows attackers with local access to execute arbitrary code via execution from a compromised folder...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Jan 2020 - Includes Oracle Jan 2020 CPU minus CVE-2020-2585, CVE-2020-2654, and CVE-2020-2590

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 8 that are used by Rational Software Architect Designer and Rational Software Architect Designer for Websphere Software. These issues were disclosed as part of the IBM Java SDK updates in Jan 2020...

Security Bulletin: IBM Kenexa LMS On Premise - IBM SDK, Java Technology Edition Quarterly CPU - Jan 2020 - Includes Oracle Jan 2020 CPU (CVE-2019-4732)

Summary We have identified that the IBM Kenexa LMS On Premise is affected by one or more security vulnerabilities. These have been addressed in LMS 6.1.0 version. Vulnerability Details CVEID: CVE-2019-4732 DESCRIPTION: IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55, 7.1.0.0...

CVE-2020-4195

CVE-2020-4195 affects IBM API Connect: API Connect V2018.4.1.0–2018.4.1.10 vulnerable to clickjacking via a malicious website, enabling a remote actor to hijack the user’s click actions. The IBM security bulletin confirms remediation in V2018.4.1.11 (addressed) and provides the upgrade path (2018...

DLL Hijacking Vulnerability in NetEase Email Master for Windows Edition

NetEase Email Master is an email client that supports multiple platforms. A DLL hijacking vulnerability exists in NetEase Mail Master for Windows, which can be exploited by attackers to execute malicious code...

DLL Hijacking Vulnerability in 360 Extreme Browser

360 Extreme Browser is a dual-core browser owned by Beijing Qihoo Technology Co. 360 Extreme Browser suffers from a DLL hijacking vulnerability that can be exploited by attackers to execute malicious code...

Zijin Bridge Monitoring and Configuration Software 6.5 DLL Hijacking Vulnerability

Zijinqiao monitoring and configuration software is an industrial automation monitoring and configuration software developed by Daqing Zijinqiao Software Technology Company, which is funded by PetroChina. A DLL hijacking vulnerability exists in Zijinqiao Monitoring and Configuration Software 6.5,...

DLL Hijacking Vulnerability in Raytheon NN Accelerator of Raytheon (Wuhan) Information Technology Co.

Thor NN Accelerator is an international game acceleration tool. Raytheon Wuhan Information Technology Co. Raytheon NN Accelerator suffers from a DLL hijacking vulnerability, which can be exploited by an attacker to inject an executable DLL file into the client process to perform arbitrary functio...

DLL hijacking vulnerability in Dolphin Online Game Accelerator of Xiamen Xiangyou Network Technology Co.

Dolphin Online Game Accelerator is an online game acceleration software. Dolphin Online Game Accelerator has a DLL hijacking vulnerability, which can be exploited by attackers to inject executable DLL files into client processes to perform arbitrary functions...

CoDeSys v3.5.15.20 suffers from dll hijacking vulnerability

CoDeSys is a powerful PLC software programming tool, manufacturer-independent IEC 61131-1 programming software, which supports the IEC61131-3 standard IL, ST, FBD, LD, CFC, SFC six PLC programming languages, the user can choose a different language to edit subroutines, function modules, etc. in t...

Kudou Music for PC suffers from dll hijacking vulnerability

Kudou Music for PC is a music playback software Cool Dog Music for PC suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute arbitrary code...

DLL Hijacking Vulnerability in Kingview

KingView is the first industrial configuration software product launched by Beijing Asia Control Technology Company in China. Kingview there is a DLL hijacking vulnerability hijacking vulnerability, attackers can use the vulnerability to load the DLL file for command execution...

Baidu.com disk has dll hijacking vulnerability

Baidu.com formerly Baidu Cloud is a cloud storage service launched by Baidu, which has covered mainstream PC and cell phone operating systems. A dll hijacking vulnerability exists in Baidu.com, which can be exploited by an attacker to load an untrusted dynamic link library for command execution...

Flush Love Fund suffers from dll hijacking vulnerability

Flush Love Fund is a software with fund quotes query, earnings ranking, comprehensive ratings of major institutions, fund trading, support for online fund buying and selling and other functions. Flush Love Fund has a dll hijacking vulnerability that can be exploited by attackers to execute...

Big Research Insider Edition has a dll hijacking vulnerability

Big Research Insider Edition is a stock speculation software. Big Research Insider Edition suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute arbitrary code...