Lenovo Yoga 700-11ISK and Yoga 700-14ISK DLL Search Path Vulnerability

The Lenovo Yoga 700-11ISK and Yoga 700-14ISK are both laptops from the Chinese company Lenovo Lenovo. The Lenovo Yoga 700-11ISK and Yoga 700-14ISK suffer from a DLL search path vulnerability that can be exploited by an attacker to elevate privileges...

Schneider ZigBee Installation Toolkit Has Multiple dll Hijacking Vulnerabilities

Schneider Electric SA is a global electrical company headquartered in France and a global specialist in energy efficiency management and automation. The Schneider ZigBee Installation Toolkit has multiple dll hijacking vulnerabilities that can be exploited by an attacker to gain server privileges...

Cisco Jabber for Windows DLL Preloading Vulnerability

Cisco Jabber for Windows securely unifies status, instant messaging, video, voice, voice messaging, screen sharing, and conferencing capabilities into a single client that simplifies communications and increases productivity. A DLL preloading vulnerability exists in Cisco Jabber for Windows...

CVE-2017-10722

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the desktop application used to connect to the device suffers from a stack overflow if more than 26 characters are passed to it as the Wi-Fi password. This application is...

CVE-2017-10720

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the desktop application used to connect to the device suffers from a stack overflow if more than 26 characters are passed to it as the Wi-Fi name. This application is installe...

CVE-2017-10720

CVE-2017-10720 concerns the Shekar Endoscope desktop software. The issue is a stack overflow in the desktop application when more than 26 characters are provided for the Wi‑Fi name. The vulnerable code path involves the DLL avilib.dll and a function flow culminating in a memmove call that uses a ...

CVE-2017-10722

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the desktop application used to connect to the device suffers from a stack overflow if more than 26 characters are passed to it as the Wi-Fi password. This application is...

Adobe Animator suffers from dll hijacking vulnerability

Adobe Animator is a 2D vector animation creation software. Adobe Animator has a dll hijacking vulnerability when processing xfl project files, which can be exploited by attackers to load a malicious dll and execute malicious code...

Adobe Character Animator suffers from dll hijacking vulnerability

Adobe Character Animator is a character animation software. Adobe Character Animator has a dll hijacking vulnerability when handling chproj project files, which can be exploited by attackers to load a malicious dll and execute malicious code...

Adobe Premiere Pro suffers from dll hijacking vulnerability

Adobe Premiere Pro is a video editing software. Adobe Premiere Pro has a dll hijacking vulnerability when processing prproj project files, which can be exploited by an attacker to load a malicious dll and execute malicious code...

Adobe Prelude suffers from a dll hijacking vulnerability

Adobe Prelude is a video post-processing software. Adobe Prelude has a dll hijacking vulnerability when processing plproj project files, which can be exploited by attackers to load a malicious dll and execute malicious code...

CVE-2019-5245

HiSuite 9.1.0.300 versions and earlier contains a DLL hijacking vulnerability. This vulnerability exists due to some DLL file is loaded by HiSuite improperly. And it allows an attacker to load this DLL file of the attacker's choosing that could execute arbitrary code...

CVE-2019-10971

The application Network Configurator for DeviceNet Safety 3.41 and prior searches for resources by means of an untrusted search path that could execute a malicious .dll file not under the application's direct control and outside the intended directories...

CVE-2019-12177

Privilege escalation due to insecure directory permissions affecting ViveportDesktopService in HTC VIVEPORT before 1.0.0.36 allows local attackers to escalate privileges via DLL hijacking...

Schneider Electric Twidosuite software suffers from a dll hijacking vulnerability when processing xpr files

Schneider Electric Twidosuite is a programming software. The Schneider Electric Twidosuite software is vulnerable to a dll hijacking vulnerability when processing xpr files. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

schneider Vijeo Designer suffers from dll hijacking vulnerability

Schneider Electric SA is a global electrical company headquartered in France and a global specialist in energy efficiency management and automation. A dll hijacking vulnerability exists in schneider Vijeo Designer. An attacker can exploit this vulnerability to load a malicious dll and execute...

Fortinet FortiClient Code Execution Vulnerability

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A security vulnerability exists in Fortinet FortiClient...

Foxit Reader and Foxit PhantomPDF for Windows Information Disclosure Vulnerability (CNVD-2019-13811)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in the ConvertToPDFx86.dll file in Foxit Reader 9.4.1.16828 and earlier, Foxit PhantomPDF 8.3.9.41099 and earlier, and Foxit PhantomPDF 9.4.1.16828 and earlier, on Windows...

schneider Proclima suffers from dll hijacking vulnerability

schneider Proclima is a thermal calculation software. A dll hijacking vulnerability exists in schneider Proclima. An attacker can load a malicious dll and execute malicious code...

CVE-2018-18369

Norton Security Windows client prior to 22.16.3 and SEP SBE Windows client prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution an...