366 matches found
PT-2024-1407 · Trend Micro · Uiairsupport
Name of the Vulnerable Software and Affected Versions: Trend Micro uiAirSupport versions 6.0.2092 and below Description: The issue is related to a DLL hijacking/proxying vulnerability in the Trend Micro uiAirSupport component. If exploited, this could allow an attacker to impersonate and modify a...
CVE-2023-48677
CVE-2023-48677 is a local privilege escalation caused by a DLL hijacking vulnerability in Acronis Cyber Protect products. Affected on Windows: Cyber Protect Home Office before build 40901, Cyber Protect Cloud Agent before build 39378, and Cyber Protect 16 before build 39938. The root cause is DLL...
CVE-2023-45248
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 36497, Acronis Cyber Protect 16 Windows before build 37391...
CVE-2023-45248
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 36497, Acronis Cyber Protect 16 Windows before build 37391...
Spoofing
The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services...
CVE-2023-42446 Pow Mnesia cache doesn't invalidate all expired keys on startup
Pow is a authentication and user management solution for Phoenix and Plug-based apps. Starting in version 1.0.14 and prior to version 1.0.34, use of Pow.Store.Backend.MnesiaCache is susceptible to session hijacking as expired keys are not being invalidated correctly on startup. A session may expi...
Spoofing
A DLL hijacking vulnerability has been discovered in OutSystems Service Studio 11 11.53.30 build 61739. When a user open a .oml file OutSystems Modeling Language, the application will load the following DLLs from the same directory avlibGLESv2.dll, libcef.DLL, user32.dll, and d3d10warp.dll. Using...
Atlassian Confluence 7.1.x < 7.12.3 DLL Hijacking
According to its self-reported version number, the Atlassian Confluence application running on the remote host is prior to 7.4.10 or 7.5.0 prior to 7.12.3. It therefore may be affected by a weakness when deployed onto the Windows operating system environment allows allow authenticated local...
K54460845: BIG-IP Edge Client for Windows vulnerability CVE-2022-28714
Security Advisory Description A DLL hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer. CVE-2022-28714 Impact This vulnerability may be exploited to allow an attacker to use malicious Dynamic Link Libraries DLL to gain privilege escalation on the client Windows system...
CVE-2023-22283
On versions beginning in 7.1.5 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client for Windows. User interaction and administrative privileges are required to exploit this vulnerability because the victim user needs to run the executable on the system and the attacke...
K76964818: BIG-IP Edge Client for Windows vulnerability CVE-2023-22358
Security Advisory Description A DLL hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer. CVE-2023-22358 Impact An attacker may exploit this vulnerability to use malicious Dynamic Link Libraries DLL to gain privilege escalation on the client Windows system. The installer loa...
CVE-2020-25502
Cybereason EDR version 19.1.282 and above, 19.2.182 and above, 20.1.343 and above, and 20.2.X and above has a DLL hijacking vulnerability, which could allow a local attacker to execute code with elevated privileges...
PT-2023-14972 · Unknown · Squirrel.Windows
Name of the Vulnerable Software and Affected Versions: Squirrel.Windows affected versions not specified Description: The issue concerns a DLL hijacking problem. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue...
Design/Logic Flaw
Efs Software Easy Chat Server Version 3.1 was discovered to contain a DLL hijacking vulnerability via the component TextShaping.dll. This vulnerability allows attackers to execute arbitrary code via a crafted DLL...
CVE-2022-44555
The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services to be unavailable...
CVE-2022-39859
CVE-2022-39859 affects the UPHelper library prior to version 3.0.12, where an implicit intent hijacking vulnerability can allow an attacker to access sensitive information via implicit intents. The issue is documented across multiple sources (e.g., PT-2022-25049) indicating the vulnerability lies...
CVE-2021-46835
There is a traffic hijacking vulnerability in WS7200-10 11.0.2.13. Successful exploitation of this vulnerability can cause packets to be hijacked by attackers...
CVE-2021-46835
There is a traffic hijacking vulnerability in WS7200-10 11.0.2.13. Successful exploitation of this vulnerability can cause packets to be hijacked by attackers...
