PT-2020-3299

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description A remote code execution issue exists due to improper input validation before loading dynamic link library DLL files...

PT-2020-13336

Name of the Vulnerable Software and Affected Versions kerberos versions prior to 1.0.0 Description The issue allows arbitrary code execution and privilege escalation via injection of malicious DLLs through use of the kerberos sspi LoadLibrary method, because of a DLL path search. This occurs...

CVE-2020-13110: Uncontrolled Search Path Element

The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection of malicious DLLs through use of the kerberossspi LoadLibrary method, because of a DLL path search...

Bitdefender Endpoint Security Tool Code Issue Vulnerability

Bitdefender Endpoint Security Tool is an endpoint security management tool from the Romanian company Bitdefender. A code issue vulnerability exists in the EPSecurityService.exe file in versions prior to Bitdefender Endpoint Security Tools 6.6.11.163. The vulnerability stems from an improper desig...

PT-2018-11530

Name of the Vulnerable Software and Affected Versions Sandoba CP:Shop version v2016.1 Description A cross-site scripting XSS issue was found, allowing remote attackers to inject script codes into the client-side of the web application through vulnerable parameters. The attack vector is...

Netlux Antivirus Search Path Local Elevation of Privilege Vulnerability

Netlux Antivirus is a suite of antivirus software from Netlux India. The program offers features such as security against all types of viruses, trojans, malwares and spyware. Netlux Antivirus handles path searches with a security vulnerability that allows local attackers can exploit to elevate...

KLA10021 LPE vulnerability in DAEMON Tools

An unspecified vulnerability was found in the DAEMON Tools. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited from the network at a point related to path search. Via a Trojan horse. Original advisories NVD Exploitation Public exploits exist...

Windows URL Protocol Handler may insecurely load executable files

Overview Windows URL Protocol Handler may use unsafe methods for determining how to load executable .exe files. Windows URL Protocol Handler loads a specified executable for each protocol. Windows URL Protocol Handler contains an issue with the file search path, which may insecurely load executab...