Lucene search
K

444 matches found

OSV
OSV
added 2024/08/29 8:15 p.m.2 views

CVE-2024-34017

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy Windows before build 4569...

7.3CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2024/08/13 5:15 p.m.3 views

CVE-2023-31348

A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

7.8CVSS6AI score0.00182EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/07/09 12:0 a.m.4 views

PT-2024-28343 · Unknown · Ifood Order Manager

Name of the Vulnerable Software and Affected Versions: ifood Order Manager version 3.35.5 Description: An issue in ifood Order Manager allows attackers to execute arbitrary code via a DLL hijacking attack. Recommendations: For ifood Order Manager version 3.35.5, consider restricting access to the...

7.8CVSS8AI score0.00564EPSS
Exploits0References6
CNNVD
CNNVD
added 2024/07/09 12:0 a.m.2 views

ifood Order Manager Security Vulnerability

ifood Order Manager is an order manager from ifood. A security vulnerability exists in ifood Order Manager version v3.35.5, which originates from a vulnerability that allows attackers to execute arbitrary code via a DLL hijacking attack...

7.8CVSS7.7AI score0.00564EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/06/17 12:0 a.m.4 views

PT-2024-6676 · Rockwell Automation · Emulate3D

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Emulate3D version 17.00.00.13276 Description: A vulnerability exists in the Rockwell Automation Emulate3D, which could be leveraged to execute a DLL Hijacking attack. The application loads shared libraries, which are...

6CVSS8.3AI score0.00219EPSS
Exploits0References9
CNNVD
CNNVD
added 2024/04/29 12:0 a.m.5 views

Oracle EMS SQL Manager 安全漏洞

Oracle EMS SQL Manager is a database management tool from Oracle Corporation USA. A security vulnerability exists in Oracle EMS SQL Manager version 3.6.2 that originates from allowing DLL hijacking, which allows users to trigger arbitrary code execution...

4.2CVSS8AI score0.00152EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/03/19 12:0 a.m.3 views

Claris FileMaker Pro Security Vulnerability

Claris FileMaker Pro is a cross-platform relational database application from Claris USA. It integrates a database engine with a graphical user interface Gui and security features that allow users to modify the database, or tables, by dragging new elements onto layouts, screens. A security...

7.8CVSS6.7AI score0.00179EPSS
Exploits0References2
OSV
OSV
added 2024/02/29 8:15 p.m.3 views

CVE-2024-1595

Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed...

7.8CVSS5.8AI score0.0039EPSS
Exploits0References1
OSV
OSV
added 2024/02/26 4:27 p.m.3 views

CVE-2023-49114

A DLL hijacking vulnerability was identified in the Qognify VMS Client Viewer version 7.1 or higher, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL, if some specific pre-conditions are met...

6.7CVSS6.1AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/02/26 12:0 a.m.7 views

PT-2024-13680 · Qognify · Qognify Vms Client Viewer

Name of the Vulnerable Software and Affected Versions: Qognify VMS Client Viewer versions 7.1 and higher Description: A DLL hijacking issue was identified, allowing local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL, if specific...

6.7CVSS7.7AI score0.00359EPSS
Exploits2References7
Positive Technologies
Positive Technologies
added 2024/02/22 12:0 a.m.3 views

PT-2024-1947 · Delta Electronics · Cncsoft-B Dopsoft

Name of the Vulnerable Software and Affected Versions: Delta Electronics CNCSoft-B DOPSoft versions prior to 4.0.0.82 Description: The issue is related to the insecure loading of libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed...

7.8CVSS7.8AI score0.0039EPSS
Exploits0References7
OSV
OSV
added 2024/01/29 7:15 p.m.2 views

CVE-2024-23940

Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and below is vulnerable to a DLL hijacking/proxying vulnerability, which if exploited could allow an attacker to impersonate and modify a library to execute code on the system and...

7.8CVSS6AI score
Exploits0References3
CNNVD
CNNVD
added 2024/01/29 12:0 a.m.3 views

Trend Micro uiAirSupport Security Vulnerability

Trend Micro uiAirSupport is a Trend Micro support tool for Trend Micro customers who subscribe to our Premium Services. A security vulnerability exists in Trend Micro uiAirSupport 6.0.2092 and prior versions, which stems from vulnerability to a DLL hijacking/proxy vulnerability that could be...

7.8CVSS6.7AI score0.00636EPSS
Exploits1References5
OSV
OSV
added 2024/01/10 5:15 p.m.3 views

CVE-2023-29444

An uncontrolled search path element vulnerability DLL hijacking has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Alternatively, they could host a trojanized version of the software and trick victims into downloading and installing their...

7.3CVSS5.8AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/01/09 12:0 a.m.4 views

PT-2024-1627 · Microsoft · Printer Metadata Troubleshooter Tool

Name of the Vulnerable Software and Affected Versions: Microsoft Printer Metadata Troubleshooter Tool versions prior to the January 5, 2024 update Description: The issue is related to insufficient input validation in the Microsoft Printer Metadata Troubleshooter Tool, which can allow an attacker ...

7.8CVSS9.7AI score0.01173EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2024/01/05 12:0 a.m.5 views

PT-2024-12972 · Zte · Zte Zxcloud Irai

Name of the Vulnerable Software and Affected Versions: ZTE ZXCLOUD iRAI affected versions not specified Description: The issue is related to a DLL hijacking vulnerability. An attacker could exploit this by placing a fake DLL file in a specific directory, allowing the execution of malicious code...

4.8CVSS4.8AI score0.002EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2023/12/07 8:15 a.m.3 views

CVE-2023-48861

DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll...

7.8CVSS7.4AI score0.00308EPSS
Exploits1References2
OSV
OSV
added 2023/12/07 8:15 a.m.2 views

CVE-2023-48861

DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll...

7.8CVSS6AI score0.00308EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2023/12/04 2:15 p.m.5 views

CVE-2023-41613

EzViz Studio v2.2.0 is vulnerable to DLL hijacking...

7.8CVSS7.1AI score0.00451EPSS
Exploits2References2
CNNVD
CNNVD
added 2023/12/01 12:0 a.m.2 views

Huddly Camera Service Security Vulnerability

Huddly Camera Service is a connected camera technology from Huddly, Inc. in the United States. A security vulnerability exists in Huddly Camera Service versions prior to 8.0.7 excluding version 7.99, which stems from a DLL hijacking vulnerability due to HuddlyCameraService being installed in a...

7.8CVSS7.5AI score0.00316EPSS
Exploits2References1
Rows per page
Query Builder