CVE-2021-20051

SonicWall Global VPN Client 4.10.7.1117 installer 32-bit and 64-bit and earlier versions have a DLL Search Order Hijacking vulnerability in one of the installer components. Successful exploitation via a local attacker could result in command execution in the target system...

CVE-2022-28792

DLL hijacking vulnerability in Gear IconX PC Manager prior to version 2.1.220405.51 allows attacker to execute arbitrary code. The patch adds proper absolute path to prevent dll hijacking...

CVE-2022-23449

A vulnerability has been identified in SIMATIC Energy Manager Basic All versions V7.3 Update 1, SIMATIC Energy Manager PRO All versions V7.3 Update 1. A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the...

CVE-2022-27843

DLL hijacking vulnerability in Kies prior to version 2.6.4.220142 allows attacker to execute abitrary code...

CVE-2022-26511

WPS Presentation 11.8.0.5745 insecurely load d3dx941.dll when opening .pps files'current directory type' DLL loading...

Atlassian Confluence Server 代码问题漏洞

Atlassian Confluence Server is a server version of Atlassian Australia's suite of collaborative software with enterprise knowledge management capabilities and support for building enterprise WiKi. An elevation of privilege vulnerability exists in Atlassian Confluence Server, which stems from an...

CVE-2022-23410

AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking. IPUtility.exe would attempt to load DLLs from its current working directory which could allow for remote code execution if a compromised DLL would be placed in the same...

PT-2022-2583 · Unknown +1 · Git For Windows +1

Name of the Vulnerable Software and Affected Versions: Git for Windows versions prior to 2.35.2 Description: The issue is related to a DLL hijacking vulnerability in the uninstaller of Git for Windows when run under the SYSTEM user account. This vulnerability is due to an uncontrolled search path...

CVE-2020-12891

AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user may be able to drop its malicious DLL file in any location which is in path environment variable...

Acronis Cyber​​ Protect和Acronis True Image 代码问题漏洞

Acronis Cyber Protect and Acronis True Image are both products of Acronis Singapore.Acronis Cyber Protect is a cyber protection product. The software provides organizations with data backup, disaster recovery, artificial intelligence-based malware protection, etc. Acronis True Image is a well-kno...

CVE-2021-42110

An issue was discovered in Allegro Windows formerly Popsy Windows before 3.3.4156.1. A standard user can escalate privileges to SYSTEM if the FTP module is installed, because of DLL hijacking...

Acronis Agent 代码问题漏洞

Acronis Agent and others are are products of Singapore-based Acronis. A DLL hijacking vulnerability exists in several Acronis products, which can be exploited by attackers to cause a denial of service...

TIETEN Acronis Cyber Protect 代码问题漏洞

Acronis Cyber Protect is an application. Provides unified protection for your network by integrating backup, disaster recovery, AI-based malware protection, remote assistance and security into a single, reliable tool.Acronis Cyber Protect 15 suffers from a DLL hijacking vulnerability that could b...

CVE-2021-44198

DLL hijacking could lead to local privilege escalation. The following products are affected: Acronis Cyber Protect 15 Windows before build 28035...

Mcafee McAfee Drive Encryption 代码问题漏洞

Mcafee McAfee Drive Encryption is a full-disk encryption software from Mcafee that helps protect data on Microsoft Windows tablets, laptops, and desktop PCs from sensitive data loss, especially from lost or stolen devices. mcafee Drive Encryption MDE version 7.3.0 HF2 7.3.0.183 prior to this...

Delta Electronics DiaLink 代码问题漏洞

DIALink is an equipment networking platform from Delta Electronics that effectively manages CNC machines and PLC-controlled machines, collects on-site equipment data and connects it to the upper management platform through a unified interface, and at the same time provides visual information...

CVE-2021-34788

A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac OS could allow an authenticated, local attacker to perform a shared library hijacking attack on an affected device if the VPN Posture HostScan Module is installed on the AnyConnect...

Race condition

A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac OS could allow an authenticated, local attacker to perform a shared library hijacking attack on an affected device if the VPN Posture HostScan Module is installed on the AnyConnect...

CVE-2021-34788 Cisco AnyConnect Secure Mobility Client for Linux and Mac OS with VPN Posture (HostScan) Module Shared Library Hijacking Vulnerability

A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac OS could allow an authenticated, local attacker to perform a shared library hijacking attack on an affected device if the VPN Posture HostScan Module is installed on the AnyConnect...

CVE-2021-34788 Cisco AnyConnect Secure Mobility Client for Linux and Mac OS with VPN Posture (HostScan) Module Shared Library Hijacking Vulnerability

A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac OS could allow an authenticated, local attacker to perform a shared library hijacking attack on an affected device if the VPN Posture HostScan Module is installed on the AnyConnect...