Lucene search
+L

844 matches found

Apple
Apple
added 2020/05/26 9:27 a.m.31 views

About the security content of Windows Migration Assistant 2.2.0.0 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

7.8CVSS7.6AI score0.00469EPSS
SaveExploits0Affected Software1
Apple
Apple
added 2020/05/26 12:0 a.m.162 views

About the security content of Windows Migration Assistant 2.2.0.0

About the security content of Windows Migration Assistant 2.2.0.0 This document describes the security content of Windows Migration Assistant 2.2.0.0 v. 1A11. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an...

7.8CVSS7.9AI score0.00469EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2020/04/30 5:15 p.m.6 views

CVE-2020-12050

SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ file with new contents that cause loading of an arbitrary library...

7CVSS7.1AI score
SaveExploits0References9
OSV
OSV
added 2020/04/30 5:15 p.m.3 views

UBUNTU-CVE-2020-12050

SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ file with new contents that cause loading of an arbitrary library...

7CVSS5.9AI score0.00308EPSS
SaveExploits0References6
CNVD
CNVD
added 2020/04/07 12:0 a.m.2 views

Schneider Electric Limited CET850 suffers from a dll hijacking vulnerability

Schneider Electric SA is a global electrical company headquartered in France. A dll hijacking vulnerability exists in Schneider Electric SA CET850, which can be exploited by an attacker to load a malicious dll and execute malicious code...

7AI score
SaveExploits0
NVD
NVD
added 2020/03/25 6:15 p.m.19 views

CVE-2020-3803

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

7.8CVSS8.6AI score0.0083EPSS
SaveExploits0References1
OSV
OSV
added 2020/03/25 6:15 p.m.1 views

CVE-2020-3803

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

7.8CVSS7.1AI score0.0083EPSS
SaveExploits0References1
Prion
Prion
added 2020/03/25 6:15 p.m.20 views

Privilege escalation

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

4.4CVSS8.4AI score0.0083EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2020/03/25 5:28 p.m.30 views

CVE-2020-3803

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

8.5AI score0.0083EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/03/19 12:0 a.m.32 views

Adobe Reader < 2015.006.30518 / 2017.011.30166 / 2020.006.20042 Multiple Vulnerabilities (APSB20-13) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 2015.006.30518, 2017.011.30166, or 2020.006.20042. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.3015...

10CVSS9.3AI score0.07581EPSS
SaveExploits0References14
OSV
OSV
added 2020/03/12 4:15 p.m.4 views

CVE-2020-0798

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Installer...

7.8CVSS6.9AI score0.01043EPSS
SaveExploits0References1
Prion
Prion
added 2020/03/12 4:15 p.m.22 views

Privilege escalation

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Installer...

7.2CVSS6.6AI score0.01214EPSS
SaveExploits0References1Affected Software2
CNVD
CNVD
added 2020/03/05 12:0 a.m.1 views

Tencent Document Dll Hijacking Vulnerability

Tencent Document is an online document that allows for multi-person collaboration. Tencent Document has a Dll hijacking vulnerability that can be exploited by attackers to load a malicious dll and execute arbitrary code...

7.5AI score
SaveExploits0
OSV
OSV
added 2020/01/14 9:15 p.m.6 views

CVE-2016-6592

A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6. A remote user can create a specially crafted DLL file that, when placed on the target user's system, will cause the Norton Download Manager component to load the remote user's DLL instead of the intended DLL and...

7.8CVSS6AI score0.0096EPSS
SaveExploits0References6
CNVD
CNVD
added 2019/12/25 12:0 a.m.3 views

DLL Hijacking Vulnerability in 2345 Ace Input Method

2345 Ace Input Method is a Chinese input software for PC launched by Shanghai 2-3-4-5 Mobile Technology Co. 2345 Ace Input Method has a DLL hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute malicious code...

7.1AI score
SaveExploits0
Prion
Prion
added 2019/12/18 6:15 p.m.20 views

Code injection

A dynamic library loading issue existed in iTunes setup. This was addressed with improved path searching. This issue is fixed in macOS Catalina 10.15.1, iTunes for Windows 12.10.2. Running the iTunes installer in an untrusted directory may result in arbitrary code execution...

4.4CVSS7.5AI score0.00385EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2019/12/18 5:33 p.m.33 views

CVE-2019-8801

A dynamic library loading issue existed in iTunes setup. This was addressed with improved path searching. This issue is fixed in macOS Catalina 10.15.1, iTunes for Windows 12.10.2. Running the iTunes installer in an untrusted directory may result in arbitrary code execution...

8AI score0.00385EPSS
SaveExploits0References2
CNVD
CNVD
added 2019/11/27 12:0 a.m.6 views

STAMP Workbench Installer Code Issue Vulnerability

STAMP Workbench is a modeling tool that supports support for STAMP Systems Theory Accident Models and Processes/STPA Systems Theory Process Analysis. A code issue vulnerability exists in the STAMP Workbench installer that can be exploited by an attacker to cause unsafe loading of dynamic link...

7.8CVSS7.1AI score0.00755EPSS
SaveExploits0References1
Prion
Prion
added 2019/11/14 4:15 p.m.23 views

Privilege escalation

Adobe Animate CC versions 19.2.1 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

4.4CVSS7.5AI score0.00777EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2019/11/14 4:15 p.m.24 views

Privilege escalation

Adobe Illustrator CC versions 23.1 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

4.4CVSS8.1AI score0.00779EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder