Lucene search
K

444 matches found

OSV
OSV
added 2022/07/01 10:15 a.m.2 views

CVE-2022-34894

In JetBrains Hub before 2022.2.14799, insufficient access control allowed the hijacking of untrusted services...

5.3CVSS5.8AI score0.0055EPSS
Exploits1References1
OSV
OSV
added 2022/06/29 1:15 p.m.2 views

CVE-2022-34043

Incorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine v7.9.2 allows attackers to perform a DLL hijacking attack and execute arbitrary code...

7.3CVSS6AI score0.00331EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/05/23 7:16 p.m.2 views

CVE-2022-31467

A DLL hijacking vulnerability in the installed for Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, leading to execution of arbitrary code, via the installer not restricting the search path for required DLLs and then not verifying the signature...

7.9CVSS5.9AI score0.00279EPSS
Exploits0References2
OSV
OSV
added 2022/05/20 2:15 a.m.3 views

CVE-2022-28965

Multiple DLL hijacking vulnerabilities via the components instup.exe and wscproxy.exe in Avast Premium Security before v21.11.2500 allows attackers to execute arbitrary code or cause a Denial of Service DoS via a crafted DLL file...

6.5CVSS6.1AI score0.00277EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/05/19 12:0 a.m.3 views

PT-2022-3452 · Avast · Avast Premium Security

Name of the Vulnerable Software and Affected Versions: Avast Premium Security versions prior to 21.11.2500 Description: The issue is related to DLL hijacking vulnerabilities via the components instup.exe and wsc proxy.exe, which can allow attackers to execute arbitrary code or cause a Denial of...

6.8CVSS6.9AI score0.00277EPSS
Exploits0References7
ATTACKERKB
ATTACKERKB
added 2022/05/03 8:15 p.m.2 views

CVE-2022-28792

DLL hijacking vulnerability in Gear IconX PC Manager prior to version 2.1.220405.51 allows attacker to execute arbitrary code. The patch adds proper absolute path to prevent dll hijacking...

7.8CVSS7.3AI score0.00234EPSS
Exploits0References2
OSV
OSV
added 2022/04/12 9:15 a.m.4 views

CVE-2022-23449

A vulnerability has been identified in SIMATIC Energy Manager Basic All versions V7.3 Update 1, SIMATIC Energy Manager PRO All versions V7.3 Update 1. A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the...

7.3CVSS7.2AI score0.00307EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/04/11 8:15 p.m.5 views

CVE-2022-27843

DLL hijacking vulnerability in Kies prior to version 2.6.4.220142 allows attacker to execute abitrary code...

7.8CVSS7.2AI score0.00228EPSS
Exploits0References2
OSV
OSV
added 2022/03/17 6:15 p.m.2 views

CVE-2022-26511

WPS Presentation 11.8.0.5745 insecurely load d3dx941.dll when opening .pps files'current directory type' DLL loading...

7.8CVSS7.1AI score0.00609EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/02/15 12:0 a.m.4 views

Atlassian Confluence Server 代码问题漏洞

Atlassian Confluence Server is a server version of Atlassian Australia's suite of collaborative software with enterprise knowledge management capabilities and support for building enterprise WiKi. An elevation of privilege vulnerability exists in Atlassian Confluence Server, which stems from an...

7.8CVSS5.6AI score0.00325EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/02/14 10:15 p.m.5 views

CVE-2022-23410

AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking. IPUtility.exe would attempt to load DLLs from its current working directory which could allow for remote code execution if a compromised DLL would be placed in the same...

7.8CVSS7.7AI score0.00369EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/02/10 12:0 a.m.2 views

PT-2022-2583 · Unknown +1 · Git For Windows +1

Name of the Vulnerable Software and Affected Versions: Git for Windows versions prior to 2.35.2 Description: The issue is related to a DLL hijacking vulnerability in the uninstaller of Git for Windows when run under the SYSTEM user account. This vulnerability is due to an uncontrolled search path...

7.8CVSS7.7AI score0.0135EPSS
Exploits0References14
OSV
OSV
added 2022/02/04 11:15 p.m.3 views

CVE-2020-12891

AMD Radeon Software may be vulnerable to DLL Hijacking through path variable. An unprivileged user may be able to drop its malicious DLL file in any location which is in path environment variable...

7.8CVSS5.8AI score0.00254EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/02/04 12:0 a.m.9 views

Acronis Cyber​​ Protect和Acronis True Image 代码问题漏洞

Acronis Cyber Protect and Acronis True Image are both products of Acronis Singapore.Acronis Cyber Protect is a cyber protection product. The software provides organizations with data backup, disaster recovery, artificial intelligence-based malware protection, etc. Acronis True Image is a well-kno...

7.3CVSS7.3AI score0.00239EPSS
Exploits0References2
OSV
OSV
added 2021/12/08 4:15 p.m.2 views

CVE-2021-42110

An issue was discovered in Allegro Windows formerly Popsy Windows before 3.3.4156.1. A standard user can escalate privileges to SYSTEM if the FTP module is installed, because of DLL hijacking...

7.8CVSS5.8AI score0.0029EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/11/29 12:0 a.m.3 views

Acronis Agent 代码问题漏洞

Acronis Agent and others are are products of Singapore-based Acronis. A DLL hijacking vulnerability exists in several Acronis products, which can be exploited by attackers to cause a denial of service...

5.5CVSS5.6AI score0.00226EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/11/29 12:0 a.m.3 views

TIETEN Acronis Cyber Protect 代码问题漏洞

Acronis Cyber Protect is an application. Provides unified protection for your network by integrating backup, disaster recovery, AI-based malware protection, remote assistance and security into a single, reliable tool.Acronis Cyber Protect 15 suffers from a DLL hijacking vulnerability that could b...

7.8CVSS5.7AI score0.00246EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/11/10 12:0 a.m.4 views

Mcafee McAfee Drive Encryption 代码问题漏洞

Mcafee McAfee Drive Encryption is a full-disk encryption software from Mcafee that helps protect data on Microsoft Windows tablets, laptops, and desktop PCs from sensitive data loss, especially from lost or stolen devices. mcafee Drive Encryption MDE version 7.3.0 HF2 7.3.0.183 prior to this...

7.8CVSS6.2AI score0.00191EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/10/21 12:0 a.m.2 views

Delta Electronics DiaLink 代码问题漏洞

DIALink is an equipment networking platform from Delta Electronics that effectively manages CNC machines and PLC-controlled machines, collects on-site equipment data and connects it to the upper management platform through a unified interface, and at the same time provides visual information...

7.8CVSS5.6AI score0.00246EPSS
Exploits0References5
NVD
NVD
added 2021/10/06 8:15 p.m.12 views

CVE-2021-34788

A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac OS could allow an authenticated, local attacker to perform a shared library hijacking attack on an affected device if the VPN Posture HostScan Module is installed on the AnyConnect...

7CVSS0.00171EPSS
Exploits0References1
Rows per page
Query Builder