Lucene search
+L

470 matches found

osv_cve
osv_cve
•added 2021/10/06 6:15 p.m.•13 views

CVE-2021-25467

Assuming system privilege is gained, possible buffer overflow vulnerabilities in the Vision DSP kernel driver prior to SMR Oct-2021 Release 1 allows privilege escalation to Root by hijacking loaded library...

6.7CVSS6.1AI score0.00112EPSS
SaveExploits0References1
Prion
Prion
•added 2021/10/06 6:15 p.m.•29 views

Buffer overflow

Assuming system privilege is gained, possible buffer overflow vulnerabilities in the Vision DSP kernel driver prior to SMR Oct-2021 Release 1 allows privilege escalation to Root by hijacking loaded library...

7.2CVSS7AI score0.00112EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/10/06 6:15 p.m.•10 views

CVE-2021-25467

Assuming system privilege is gained, possible buffer overflow vulnerabilities in the Vision DSP kernel driver prior to SMR Oct-2021 Release 1 allows privilege escalation to Root by hijacking loaded library...

7.2CVSS6.8AI score0.00112EPSS
SaveExploits0References2
Cisco
Cisco
•added 2021/10/06 4:00 p.m.•67 views

Cisco AnyConnect Secure Mobility Client for Linux and Mac OS with VPN Posture (HostScan) Module Shared Library Hijacking Vulnerability

A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac OS could allow an authenticated, local attacker to perform a shared library hijacking attack on an affected device if the VPN Posture HostScan Module is installed on the AnyConnect...

7CVSS7AI score0.00177EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/10/06 12:00 a.m.•7 views

PT-2021-4495

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client for Linux and Mac OS affected versions not specified Description A vulnerability in the shared library loading mechanism could allow an authenticated, local attacker to perform a shared library hijacking...

7CVSS0.00177EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/06 12:00 a.m.•11 views

CVE-2021-34788: Time-of-check Time-of-use (TOCTOU) Race Condition

A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac OS could allow an authenticated, local attacker to perform a shared library hijacking attack on an affected device if the VPN Posture HostScan Module is installed on the AnyConnect...

7CVSS6.4AI score0.00177EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/09/23 3:15 p.m.•11 views

CVE-2021-26750

DLL hijacking in Panda Agent =1.16.11 in Panda Security, S.L.U. Panda Adaptive Defense 360 = 8.0.17 allows attacker to escalate privileges via maliciously crafted DLL file...

7.8CVSS7.3AI score0.00258EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/08/18 12:00 a.m.•26 views

TrustAccess Network Firewall Privileged Operation

The vulnerability of TrustAccess is related to deficiencies in information protection mechanisms. Exploiting this vulnerability allows a perpetrator with access to the directory where TrustAccess is installed to perform privileged operations through a DLL hijacking attack. This is achieved by...

6.3CVSS5.5AI score
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2021/08/12 12:00 a.m.•17 views

TIETEN Acronis Cyber Protect code-related vulnerabilities

TIETEN Acronis Cyber Protect is an application from TIETEN Acronis Cyber Protect TIETEN, China. provides the ability to unify your network protection by integrating backup, disaster recovery, AI-based malware protection, remote assistance, and security into a single, reliable tool. A security...

7.8CVSS7.4AI score0.00255EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/08/11 10:15 p.m.•21 views

CVE-2021-38571

An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows DLL hijacking, aka CNVD-C-2021-68000 and CNVD-C-2021-68502...

7.8CVSS5.8AI score0.00542EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/08/05 8:15 p.m.•19 views

CVE-2021-32580

Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to DLL hijacking...

7.8CVSS7.1AI score0.00255EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/08/05 8:15 p.m.•11 views

CVE-2021-32580

Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to DLL hijacking...

7.8CVSS7AI score0.00255EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/07/13 12:00 a.m.•24 views

VMware Thinapp code-related vulnerabilities

VMware Thinapp is a suite of application virtualization and portable application creators from Vmware USA that packages regular applications to make them portable. VMware Thinapp A code issue vulnerability exists that stems from VMware Thinapp versions prior to 5.2.10 contain a DLL hijacking...

7.8CVSS7.5AI score0.00563EPSS
SaveExploits2References6
attackerkb
attackerkb
•added 2021/07/12 11:15 a.m.•18 views

CVE-2021-22921

Node.js before 16.4.1, 14.17.2, and 12.22.2 is vulnerable to local privilege escalation attacks under certain conditions on Windows platforms. More specifically, improper configuration of permissions in the installation directory allows an attacker to perform two different escalation attacks: PAT...

7.8CVSS6.9AI score0.07409EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2021/05/06 12:00 a.m.•20 views

Cisco AnyConnect Secure Mobility Client for Windows code-related vulnerabilities

Cisco AnyConnect Secure Mobility Client for Windows is a Windows-based secure mobility client from Cisco that provides secure access to networks and applications from any device. A security vulnerability exists in Cisco AnyConnect Secure Mobility Client for Windows that could allow an...

7.8CVSS7.3AI score0.00249EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
•added 2021/04/20 7:00 a.m.•24 views

Cisco Advanced Malware Protection for Endpoints Windows Connector ClamAV for Windows and Immunet DLL Hijacking Vulnerability

...

7.8CVSS7AI score0.0028EPSS
SaveExploits0
attackerkb
attackerkb
•added 2021/04/07 4:00 p.m.•14 views

CVE-2021-1386

A vulnerability in the dynamic link library DLL loading mechanism in Cisco Advanced Malware Protection AMP for Endpoints Windows Connector, ClamAV for Windows, and Immunet could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected Windows system. To exploit this...

7.8CVSS7.6AI score0.0028EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/01/27 7:15 p.m.•23 views

CVE-2021-25247

A DLL hijacking vulnerability Trend Micro HouseCall for Home Networks version 5.3.1063 and below could allow an attacker to use a malicious DLL to escalate privileges and perform arbitrary code execution. An attacker must already have user privileges on the machine to exploit this vulnerability...

7.8CVSS7.3AI score0.00782EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/12/10 12:00 a.m.•14 views

Scintillating Light PDF Converter is vulnerable to dll hijacking.

Twinkle Light PDF Converter specializes in PDF conversion software, PDF file converter, including PDF to WORD, PDF to image, image to PDF, PDF to JPG, PDF merger, PDF compression and other related PDF conversion functions. There is a dll hijacking vulnerability in Scintillate PDF Converter. An...

7.1AI score
SaveExploits0
CNVD
CNVD
•added 2020/12/08 12:00 a.m.•11 views

Binary Vulnerability in Tencent QQ Music Windows Client

QQ Music for PC is a free music player, QQ Music for PC provides users with the latest and hottest song resources and music videos for free. A DLL hijacking vulnerability exists in the Tencent QQ Music Windows client, which can be exploited by attackers to gain control of the server...

7.1AI score
SaveExploits0
Rows per page
Query Builder