CVE-2016-5330

Untrusted search path vulnerability in the HGFS aka Shared Folders feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Player 12.1.x before 12.1.1, and VMware Fusion 8.1.x before 8.1.1 allows local users to gain privileges...

PuTTY Elevation of Privilege Vulnerability

PuTTY is a free Telnet, Rlogin and SSH client software developed by software developer Simon Tatham. The software is mainly used for remote administration of Linux systems. An elevation of privilege vulnerability exists in PuTTY beta 0.67. A local attacker can use a specially crafted DLL file to...

Huawei HiSuite Arbitrary Code Execution Vulnerability

Huawei HiSuite is a set of cell phone assistant software for PC from Huawei, China. An arbitrary code execution vulnerability exists in Huawei HiSuite 4.0.3.301 and earlier versions, which originates from the program failing to properly load a DLL file. A local attacker can exploit this...

CVE-2016-4528

Buffer overflow in Advantech WebAccess before 8.120160519 allows local users to cause a denial of service via a crafted DLL file...

Google Go untrustworthy search path vulnerability

Google Go is a programming language optimized for programming applications on multiprocessor systems by Google. An untrusted search path vulnerability exists in Google Go versions prior to 1.5.4 and 1.6.1 prior to 1.6.x for Windows platforms. A local attacker can exploit this vulnerability to gai...

CVE-2016-1742

Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

Huawei 3G/LTE Local Privilege Vulnerability

Huawei 3G/LTE is a router product from Huawei, a Chinese company. A local elevation of privilege vulnerability exists in the 'Mobile Broadband HL Service' service of Huawei 3G/LTE, which originates from a folder corresponding to the service that allows users to add a malicious VERSION.dll file. T...

The vulnerability of the Internet Explorer browser, which allows a hacker to elevate their privileges

The vulnerability of the Internet Explorer browser is related to errors during the loading of DLLs. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges through a specially created application...

Huawei UTPS Untrusted Search Path Vulnerability

Huawei UTPS is an application software from Huawei China that runs on a PC to manage data cards. An untrusted search path vulnerability exists in previous versions of Huawei UTPS UTPS-V200R003B015D15SP00C983, which can be exploited by a local attacker with the help of a Trojan horse DLL file to...

Microsoft Internet Explorer DLL Loading Remote Code Execution Vulnerability

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A remote code execution vulnerability exists in Microsoft IE version 11, which originates from a program that fails to properly...

Microsoft Office Compatibility Pack Remote Code Execution Vulnerabilities (3148775)

This host is missing a critical security update according to Microsoft Bulletin MS16-042. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Excel Viewer Remote Code Execution Vulnerabilities (3148775)

This host is missing an important security update according to Microsoft Bulletin MS16-042. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

ABB Panel Builder 800 DLL Handling Vulnerability

ABB Panel Builder 800 is a Web-based HMI Human Machine Interface system. ABB Panel Builder fails to properly handle DLL files, allowing an attacker to inject and execute arbitrary code using a DLL with an unspecified absolute path...

Wireshark 1.12.x < 1.12.10 Multiple Vulnerabilities (Mac OS X)

The version of Wireshark installed on the remote Mac OS X host is 1.12.x prior to 1.12.10. It is, therefore, affected by multiple vulnerabilities in the following components, which can result in a memory disclosure or a denial of service : - ASN.1 BER dissector - DNP dissector - GSM A-bis OML...

Microsoft DLL Load Remote Code Execution Vulnerability

Microsoft Windows and Internet Explorer IE are both products of Microsoft Corporation, U.S.A. Windows is a family of operating systems.IE is a Web browser that is the default browser that comes with Windows operating systems. A remote code execution vulnerability exists in Microsoft Windows and I...

Microsoft Windows DLL Load Denial of Service Vulnerability

Microsoft Windows is a family of operating systems released by Microsoft Corporation in the U.S. Sync Framework is one of the synchronization platform components used to enable collaboration and offline access to applications, services, and devices. A denial of service vulnerability exists in Syn...

CVE-2016-0042

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "Windows DLL Loading Remote...

CVE-2016-0041

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 10 and 11 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka...

TrueCrypt and VeraCrypt DLL File Loading Arbitrary Code Execution Vulnerability

TrueCrypt and VeraCrypt are both free, open source disk encryption software. TrueCrypt and VeraCrypt load DLLs contain security vulnerabilities that allow attackers to exploit the vulnerabilities to build malicious files that can be parsed by the user and can execute arbitrary code...

Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2016-00256)

Microsoft Windows is a popular operating system. Microsoft Windows fails to properly load DLL files, allowing attackers to exploit the vulnerability to build special files that can be tricked into being parsed by users to elevate privileges...