Lucene search
K

287 matches found

NVD
NVD
added 2018/08/22 5:29 p.m.7 views

CVE-2018-5235

Norton Utilities prior to 16.0.3.44 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, it will...

6CVSS6AI score0.00156EPSS
Exploits0References2
OSV
OSV
added 2018/08/22 5:29 p.m.1 views

CVE-2018-5238

Norton Power Eraser prior to 5.3.0.24 and SymDiag prior to 2.1.242 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the...

7.8CVSS5.8AI score
Exploits0References2
Prion
Prion
added 2018/08/22 5:29 p.m.14 views

Sql injection

Norton Power Eraser prior to 5.3.0.24 and SymDiag prior to 2.1.242 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the...

6.8CVSS7.6AI score0.00496EPSS
Exploits0References2Affected Software2
OSV
OSV
added 2018/08/22 5:29 p.m.0 views

CVE-2018-5235

Norton Utilities prior to 16.0.3.44 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, it will...

6CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2018/08/22 5:29 p.m.9 views

CVE-2018-5238

Norton Power Eraser prior to 5.3.0.24 and SymDiag prior to 2.1.242 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the...

7.8CVSS7.7AI score0.00496EPSS
Exploits0References2
CVE
CVE
added 2018/08/22 5:0 p.m.44 views

CVE-2018-5238

CVE-2018-5238 affects Norton Power Eraser (before 5.3.0.24) and SymDiag (before 2.1.242). It is a DLL preloading vulnerability where an application loads a DLL and an attacker-provided DLL in the search path can be chosen, allowing code execution under the application’s context. The vulnerability...

7.8CVSS7.6AI score0.00496EPSS
Exploits0References2Affected Software2
CVE
CVE
added 2018/08/22 5:0 p.m.49 views

CVE-2018-5235

Norton Utilities prior to 16.0.3.44 is affected by a DLL preloading vulnerability. An attacker can exploit how the application locates and loads DLLs by placing a malicious DLL in the search path, leading to the foreign DLL executing in the Norton Utilities process context. The issue can be intro...

6CVSS6AI score0.00156EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2018/08/22 5:0 p.m.15 views

CVE-2018-5235

Norton Utilities prior to 16.0.3.44 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, it will...

6AI score0.00156EPSS
Exploits0References2
Cvelist
Cvelist
added 2018/08/22 5:0 p.m.16 views

CVE-2018-5238

Norton Power Eraser prior to 5.3.0.24 and SymDiag prior to 2.1.242 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the...

7.7AI score0.00496EPSS
Exploits0References2
OSV
OSV
added 2018/07/03 4:29 p.m.2 views

CVE-2018-13102

AnyDesk before "12.06.2018 - 4.1.3" on Windows 7 SP1 has a DLL preloading vulnerability...

7.8CVSS5.5AI score
Exploits0References1
NVD
NVD
added 2018/07/03 4:29 p.m.10 views

CVE-2018-13102

AnyDesk before "12.06.2018 - 4.1.3" on Windows 7 SP1 has a DLL preloading vulnerability...

7.8CVSS7.7AI score0.00256EPSS
Exploits0References1
Prion
Prion
added 2018/07/03 4:29 p.m.12 views

Security feature bypass

AnyDesk before "12.06.2018 - 4.1.3" on Windows 7 SP1 has a DLL preloading vulnerability...

6.8CVSS7.6AI score0.00256EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2018/07/03 4:0 p.m.12 views

CVE-2018-13102

AnyDesk before "12.06.2018 - 4.1.3" on Windows 7 SP1 has a DLL preloading vulnerability...

7.7AI score0.00256EPSS
Exploits0References1
CVE
CVE
added 2018/07/03 4:0 p.m.63 views

CVE-2018-13102

CVE-2018-13102 affects AnyDesk on Windows (pre-4.1.3, i.e., before 12.06.2018). The issue is DLL preloading in AnyDesk on Windows 7 SP1, enabling local privilege escalation. The OpenVAS entry and related records describe it as a privilege-escalation vulnerability, with the root cause being DLL pr...

7.8CVSS7.6AI score0.00256EPSS
Exploits0References1Affected Software1
Veracode
Veracode
added 2018/06/12 3:1 a.m.17 views

Privilege Escalation Through DLL Preloading Attack

puppet gem is vulnerable to privilege escalation. It does not prevent the loading of DLL modules from the directories created by any authenticated users on Windows, thereby allowing the user to load attacker-controlled DLL modules...

7.8CVSS7.4AI score0.00217EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/06/11 8:29 p.m.10 views

CVE-2018-6514

In Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2, Facter on Windows is vulnerable to a DLL preloading attack, which could lead to a privilege escalation...

7.8CVSS7AI score0.00217EPSS
Exploits0References1
NVD
NVD
added 2018/06/11 8:29 p.m.11 views

CVE-2018-6514

In Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2, Facter on Windows is vulnerable to a DLL preloading attack, which could lead to a privilege escalation...

7.8CVSS7.6AI score0.00217EPSS
Exploits0References1
Prion
Prion
added 2018/06/11 8:29 p.m.9 views

Privilege escalation

In Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2, Facter on Windows is vulnerable to a DLL preloading attack, which could lead to a privilege escalation...

6.8CVSS7.5AI score0.00217EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2018/06/11 8:0 p.m.9 views

CVE-2018-6514

In Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2, Facter on Windows is vulnerable to a DLL preloading attack, which could lead to a privilege escalation...

7.6AI score0.00217EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2018/06/11 8:0 p.m.21 views

CVE-2018-6514

In Puppet Agent 1.10.x prior to 1.10.13, Puppet Agent 5.3.x prior to 5.3.7, Puppet Agent 5.5.x prior to 5.5.2, Facter on Windows is vulnerable to a DLL preloading attack, which could lead to a privilege escalation...

7.8CVSS7.6AI score0.00217EPSS
Exploits0
Rows per page
Query Builder