Schneider Electric Interactive Graphical SCADA DLL Load Remote Code Execution Vulnerability

Schneider Electric Interactive Graphical SCADA System Software is a suite of automation software for process control and supervision of SCADA systems from the French company Schneider Electric SchneiderElectric. A DLL loading remote code execution vulnerability exists in Schneider Electric...

Microsoft Office DLL Loading (CVE-2017-0197)

A remote code execution vulnerability exists in Microsoft Office. The vulnerability is caused due to an incorrect link to a dynamic-link library file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file which will lead to arbitrary code execution...

Huawei HiSuite DLL Hijacking Vulnerability

Vulnerability Description: Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. A DLL hijacking vulnerability exists in Huawei HiSuite version 4.0.5.300OVE due to the program's lack of checking for loaded system DLL files. An attacker can exploit this vulnerability ...

CVE-2016-8274

Huawei PC client software HiSuite 4.0.5.300OVE has a dynamic link library DLL hijack vulnerability; an attacker can make the system load malicious DLL files to execute arbitrary code...

AppSamvid DLL Load Native Code Execution Vulnerability

AppSamvid is a C-DAC application whitelisting software for Microsoft Windows based operating systems. Whitelisting allows only pre-approved files to be executed on the operating system. This is in contrast to traditional signature-based antivirus software methods that blacklist virus files. A loa...

Microsoft Skype DLL Load Local Code Execution Vulnerability

Microsoft Skype is a suite of instant messaging software from the American company Microsoft. Microsoft Skype suffers from a DLL loading local code execution vulnerability that originates from the program failing to validate user-supplied input. A local attacker could exploit this vulnerability t...

Rockwell Automation Connected Components Workbench DLL Load Local Code Execution Vulnerability

Rockwell Automation Connected Components Workbench is an HMI editor and component-level industrial product for designing and configuring applications and performing microcontroller turns. A local arbitrary code execution vulnerability exists in Rockwell Automation Connected Components Workbench...

Installer of PhishWall Client Internet Explorer version may insecurely load Dynamic Link Libraries

Overview PhishWall Client Internet Explorer version, provided by SecureBrain Corporation, is an anti-phishing and anti-MITB software. The installer of PhishWall Client Internet Explorer version contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries...

Multiple Avast Product DLL Load Local Code Injection Vulnerabilities

Avast Pro Antivirus and others are antivirus programs from the Czech company Avast. A local code injection vulnerability exists in several Avast products. A local attacker could use this vulnerability to execute arbitrary code in the context of a system running in an affected program to gain full...

McAfee Security Scan Plus (SSP) Elevation of Privilege Vulnerability

Intel Security McAfeeSecurity ScanPlus SSP is a free set of diagnostic tools from Intel Corporation formerly McAfee, Inc.. The product proactively checks for up-to-date antivirus, firewall, and Web security software in your computer so that you always know if your computer is secure so that it is...

Multiple VMware Workstation Product DLL Load Remote Code Execution Vulnerability

VMware Workstation is a virtual machine software product from VMware. A DLL loading remote code execution vulnerability exists in multiple VMware Workstation products. An attacker can exploit this vulnerability to execute arbitrary code with elevated privileges, and a failed attack could result i...

Windows DLL Loading Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Windows improperly validates input before loading dynamic link library DLL files. An attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete...

Rapid7 AppSpider Pro DLL Preloading Vulnerability

Rapid7 Nexpose is a suite of vulnerability management software from Rapid7 USA that can synthesize different scans to deeply probe a network. The software proactively scans configuration environments for errors, vulnerabilities, malware and provides guidance to reduce risk. A DLL preloading...

CVE-2017-5235

Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer...

CVE-2017-5234

Rapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer...

CVE-2017-5232

All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer...

Rapid7 Insight Collector DLL Loading Remote Code Execution Vulnerability

Rapid7 is the world's leading security risk information solution for vulnerability management, vulnerability scanning, vulnerability assessment and penetration testing. The Rapid7 Insight Collector DLL is loaded with a remote code execution vulnerability that can be exploited by a remote attacker...

Scada-os Configuration Software dll Hijacking Vulnerability

Scada-os is a SCADA system developed by several SCADA configuration software engineers. The TsStudio.exe component of the Scada-os configuration software is not safe to load library files, so an attacker can construct a malicious application and place it in a specific path, which will allow the...

PDfAdd DLL Hijacking Vulnerability

PDfAdd is a free geometric drawing tool. A DLL hijacking vulnerability exists in PDfAdd version 1.2, which can be exploited by local attackers to inject code or gain advanced access...

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library DLL files. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, o...