Extreme View has a DLL hijacking vulnerability

Extreme Viewer is a picture viewing software developed by Malpais Shanghai Software Technology Co. There is a DLL hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute malicious code...

CVE-2019-6825

A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima all versions prior to version 8.0.0 which could allow a malicious DLL file, with the same name of any resident DLLs inside the software installation, to execute arbitrary code in all versions of ProClima prior to version...

Adobe Animator suffers from dll hijacking vulnerability

Adobe Animator is a 2D vector animation creation software. Adobe Animator has a dll hijacking vulnerability when processing xfl project files, which can be exploited by attackers to load a malicious dll and execute malicious code...

CVE-2018-5202

SKCertService 2.5.5 and earlier contains a vulnerability that could allow remote attacker to execute arbitrary code. This vulnerability exists due to the way .dll files are loaded by SKCertService. It allows an attacker to load a .dll of the attacker's choosing that could execute arbitrary code...

Polaris Office Arbitrary Code Execution Vulnerability

Infraware Polaris Office is a suite of office software developed by Infraware Korea for mobile devices. The software is mainly used for viewing and editing Word documents, Excel tables, PowerPoint files and so on. A security vulnerability exists in Infraware Polaris Office 2017 version 8.1. An...

Microsoft OneDrive installer untrustworthy search path vulnerability

Microsoft OneDrive is a cloud backup application from Microsoft USA. The program features automatic backup of photo albums, online office and file sharing. installer is an installer for OneDrive. An untrustworthy search path vulnerability exists in the installer in Microsoft OneDrive. An attacker...

Microsoft Visual C++ Redistributable installer untrustworthy search path vulnerability

Microsoft Visual C++ Redistributable is a runtime environment library from Microsoft that supports running applications developed in Visual C++. installer is the installer for Visual C++ Redistributable. An untrusted search path vulnerability exists in the installer in Microsoft Visual C++...

WinShot Untrustworthy Search Path Vulnerability

WinShot is a screenshot tool based on the Windows platform. An untrustworthy search path vulnerability exists in WinShot 1.53a and earlier versions. An attacker can exploit this vulnerability to gain privileges with the help of a malicious DLL in the directory...

CVE-2017-17809

In Golden Frog VyprVPN before 2.15.0.5828 for macOS, the vyprvpnservice launch daemon has an unprotected XPC service that allows attackers to update the underlying OpenVPN configuration and the arguments passed to the OpenVPN binary when executed. An attacker can abuse this vulnerability by forci...

DLL Hijacking Vulnerability in FOFA Client

FOFA is a cyberspace asset search engine launched by WhiteHatHub. It can help users quickly match cyber assets and speed up the follow-up process, such as vulnerability impact range analysis, application distribution statistics, application popularity ranking statistics. A DLL hijacking...

Cisco Network Academy Packet Tracer software untrustworthy search path vulnerability

Cisco Network Academy Packet Tracer software is a set of visual network simulation software from Cisco USA. The software is able to simulate file commands, visualization and configuration of network devices, and simulate data transmission interactions. An untrustworthy search path vulnerability...

Hitachi HIBUN Confidential File Viewer Installer Untrusted Search Path Vulnerability

Hitachi HIBUN Confidential File Viewer is a set of confidential file viewers from Hitachi Solutions Japan. install is one of the installation programs. An untrusted search path vulnerability exists in the installer in versions of Hitachi HIBUN Confidential File Viewer prior to 11.20.0001. The...

DLL Hijacking Vulnerability in Hikvision's Fluorite Studio PC Client

Fluorite Studio is the companion client software for the Fluorite Cloud Video webcam, a PC client based on video applications. A DLL hijacking vulnerability exists in Hikvision's Firefly Studio PC client, which can be exploited by an attacker to execute arbitrary code on the target system by usin...

CVE-2017-5147

An Uncontrolled Search Path Element issue was discovered in AzeoTech DAQFactory versions prior to 17.1. An uncontrolled search path element vulnerability has been identified, which may execute malicious DLL files that have been placed within the search path...

The CRCA User's Software Untrusted Search Path Vulnerability

The CRCA user's Software is a business registration electronic authentication software from the Ministry of Justice in Japan. An untrusted search path vulnerability exists in The CRCA user's Software version 1.8. The vulnerability can be exploited by a remote attacker to gain privileges via a...

AzeoTech DAQFactory Uncontrolled Search Path Element Vulnerability

AzeoTech DAQFactory is an HMI/SCADA software. AzeoTech DAQFactory suffers from an uncontrolled search path element vulnerability that can be exploited by an attacker to execute a malicious DLL file that has been placed in the search path...

Shin Kinkyuji Houkoku Data Nyuryoku Program Untrustworthy Search Path Vulnerability

Shin Kinkyuji Houkoku Data Nyuryoku Program is a data entry program for basic statistical reports for the petroleum industry from the Agency for Natural Resources and Energy of Ministry, Trade and Industry METI in Japan. Installer is one of the installation programs. An untrusted search path...

CVE-2017-9648

An Uncontrolled Search Path Element issue was discovered in Solar Controls WATTConfig M Software Version 2.5.10.1 and prior. An uncontrolled search path element has been identified, which could allow an attacker to execute arbitrary code on a target system using a malicious DLL file...

Lhaz Installer Untrusted Search Path Vulnerability

Lhaz is a compression/decompression tool.Installer is one of the installers. An untrusted search path vulnerability exists in the installer in Lhaz 2.4.0 and earlier versions. An attacker can exploit this vulnerability to gain privileges with a malicious DLL in a directory...

Setup file of advance preparation untrusted search path vulnerability

Setup file of advance preparation is an installation file for a series of software released by the National Tax Agency NTA of Japan. An untrusted search path vulnerability exists in the Setup file of advance preparation installer. An attacker can exploit this vulnerability to gain privileges via ...