8983 matches found
CVE-2018-0552
Untrusted search path vulnerability in The installer of PhishWall Client Firefox and Chrome edition for Windows Ver. 5.1.26 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2018-0540
Untrusted search path vulnerability in ViX version 2.21.148.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2018-0552
CVE-2018-0552 concerns the Windows installer for PhishWall Client Firefox/Chrome Edition (Ver. 5.1.26 and earlier). The issue is an insecure DLL search path (CWE-427) that can allow arbitrary code execution with the user’s privileges via a Trojan horse DLL loaded from an unspecified directory. Do...
CVE-2018-0540
CVE-2018-0540 affects ViX 2.21.148.0, with an untrusted search path vulnerability that can allow privilege escalation by a Trojan horse DLL located in an unspecified directory (CWE-427). Public sources (JPN/JVN records and CNVD) describe the issue as insecure DLL loading in ViX, potentially enabl...
Panda Global Protection <= 17.0.1 Multiple Vulnerabilities
Panda Global Protection is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
CVE-2018-1437
IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM...
CVE-2018-1437
IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM...
Design/Logic Flaw
IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM...
WinShot Untrustworthy Search Path Vulnerability
WinShot is a screenshot tool based on the Windows platform. An untrustworthy search path vulnerability exists in WinShot 1.53a and earlier versions. An attacker can exploit this vulnerability to gain privileges with the help of a malicious DLL in the directory...
Jtrim Untrusted Search Path Vulnerability
Jtrim is a Windows-based image processing tool. An untrustworthy search path vulnerability exists in Jtrim 1.53c and earlier versions. An attacker can exploit this vulnerability to gain privileges with the help of a malicious DLL in the directory...
JVN#56764650: ViX may insecurely load Dynamic Link Libraries
ViX provided by Ｋ＿ＯＫＡＤＡ is a Graphics Viewer Software for Windows. ViX contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries contained in the same directory as an image file CWE-427. Impact Arbitrary code may be executed with the privileges of the...
Panda Global Protection Unquoted Windows Search Path Vulnerability
Panda Global Protection is a suite of antivirus software from the Spanish company Panda Security. The software protects devices from viruses, spyware, hackers and other Internet threats. A security vulnerability exists in the pandaurlfiltering service in Panda Global Protection version 17.0.1. A...
CVE-2018-6016
Unquoted Windows search path vulnerability in the srvInventoryWebServer service in 10-Strike Network Monitor 5.4 allows local users to gain privileges via a malicious artefact...
Design/Logic Flaw
Unquoted Windows search path vulnerability in the srvInventoryWebServer service in 10-Strike Network Monitor 5.4 allows local users to gain privileges via a malicious artefact...
Design/Logic Flaw
Unquoted Windows search path vulnerability in the pandaurlfiltering service in Panda Global Protection 17.0.1 allows local users to gain privileges via a malicious artefact...
CVE-2018-6321
Unquoted Windows search path vulnerability in the pandaurlfiltering service in Panda Global Protection 17.0.1 allows local users to gain privileges via a malicious artefact...
CVE-2018-6016
Unquoted Windows search path vulnerability in the srvInventoryWebServer service in 10-Strike Network Monitor 5.4 allows local users to gain privileges via a malicious artefact...
CVE-2018-6321
Unquoted Windows search path vulnerability in the pandaurlfiltering service in Panda Global Protection 17.0.1 allows local users to gain privileges via a malicious artefact...
CVE-2018-6016
CVE-2018-6016 describes an Unquoted Windows search path vulnerability in the srvInventoryWebServer service of 10-Strike Network Monitor 5.4. This local-privilege-escalation flaw can be exploited by placing a malicious artefact to gain elevated privileges. The NVD CVSSv3 vector is CVSS:3.0/AV:L/AC...