PT-2025-39638

Name of the Vulnerable Software and Affected Versions Seagate Toolkit versions prior to 2.35.0.6 Description The software attempts to load DLLs from the current working directory without validating their origin or integrity. This can be exploited by placing a malicious DLL in the same directory a...

PT-2025-5865 · Unknown · Netmod Vpn Client

Name of the Vulnerable Software and Affected Versions: NetMod VPN Client version 5.3.1 Description: The issue arises due to the improper validation of dynamically loaded libraries, allowing an attacker to execute arbitrary code by placing a malicious DLL in a directory where the application loads...

Autodesk Revit 代码问题漏洞

Autodesk Revit is a suite of building information modeling software from the American company Autodesk. A security vulnerability exists in Autodesk Revit that stems from the fact that if a maliciously crafted DLL file is placed in the same directory as an RVT file, Autodesk Revit may load the fil...

PT-2024-34339 · Unknown · Whale Browser Installer

Name of the Vulnerable Software and Affected Versions: Whale browser Installer versions prior to 3.1.0.0 Description: The issue allows an attacker to execute a malicious DLL in the user environment due to improper permission settings. Recommendations: For versions prior to 3.1.0.0, update to...

PT-2022-7153 · Autodesk · Autodesk Installer

Name of the Vulnerable Software and Affected Versions: Autodesk Installer affected versions not specified Description: The issue is related to a maliciously crafted DLL file that can be forced to write beyond allocated boundaries when the Autodesk installer parses the DLL files. This could lead t...

Honeywell SoftMaster 代码问题漏洞

Honeywell SoftMaster is a software program from Honeywell USA. Honeywell SoftMaster suffers from a code issue vulnerability that stems from the fact that if an attacker manages to trick a valid user into loading a malicious DLL, then the attacker can execute code within the context and privileges...

XINJE XD/E Series PLC Program Tool 代码问题漏洞

XINJE XD/E Series PLC Program Tool is a programming software from China XINJE Company. A security vulnerability exists in XINJE XD/E Series PLC Program Tool version 3.5.1 and prior versions. A local attacker can exploit this vulnerability to load a malicious DLL...

F5 BIG-IP 代码问题漏洞

F5 BIG-IP APM Edge Client for Windows is a client-side access control authentication access client application from F5. F5 BIG-IP has a code issue vulnerability that can be exploited by attackers to gain privilege escalation on client Windows systems using a malicious dynamic link library DLL...

Cryptomator 代码问题漏洞

Cryptomator is a simple digital self-defense tool from the Cryptomator community. It is used to protect data. Cryptomator suffers from a code issue vulnerability that stems from the fact that an attacker can exploit the vulnerability can exploit this by creating a malicious .dylib file that can b...

Acer Care Center 代码问题漏洞

Acer Care Center is a system care center from Acer China that backs up or restores your system settings and network drivers to prevent the effects of system failure. Acer Care Center has a security vulnerability that can be exploited by an attacker by placing a malicious DLL file on the target...

CVE-2021-27027

An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to code execution through maliciously crafted DLL files or information disclosure...

CVE-2020-6771

Loading a DLL through an Uncontrolled Search Path Element in Bosch IP Helper up to and including version 1.00.0008 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same application...

CVE-2020-6789

Loading a DLL through an Uncontrolled Search Path Element in the Bosch Monitor Wall installer up to and including version 10.00.0164 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same...

CVE-2021-1240

A vulnerability in the loading process of specific DLLs in Cisco Proximity Desktop for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This vulnerability is due to...

IBM DB2 Arbitrary Code Execution Vulnerability

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM DB2 suffers from an arbitrary code execution vulnerability that can be exploited by an attacker to...

Mids Reborn Hero Designer Code Issue Vulnerability

Mids Reborn Hero Designer is a suite of game character design software from Jason Thompson Software Developers. A code issue vulnerability exists in Mids Reborn Hero Designer version 2.6.0.7, which stems from the program failing to assign safe default permissions to the installation path, and can...

Fazecast jSerialComm Code Issue Vulnerability

Fazecast jSerialComm is a Java library that provides platform-independent access to standard serial ports from Fazecast, U.S.A. Schneider Electric EcoStruxure IT Gateway is a suite of cloud-based Data Center Management as a Service DMaaS offerings from Schneider Electric, France. A code issue...

Adaware antivirus elevation of privilege vulnerability

Lavasoft Adaware antivirus is a suite of antivirus software from Lavasoft Canada. A security vulnerability exists in Lavasoft Adaware antivirus versions 12.6.1005.11662 and 12.7.1055.0. The vulnerability can be exploited by an attacker to elevate privileges with the help of a malicious DLL...

CVE-2019-14688

Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product installation. The vulnerability was found to ONLY be exploitable during an initial...

The vulnerability of the device performance information collection application HP Touchpoint Analytics, due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the HP Touchpoint Analytics performance monitoring application relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using malicious DLL files...