8985 matches found
CVE-2018-6016
CVE-2018-6016 describes an Unquoted Windows search path vulnerability in the srvInventoryWebServer service of 10-Strike Network Monitor 5.4. This local-privilege-escalation flaw can be exploited by placing a malicious artefact to gain elevated privileges. The NVD CVSSv3 vector is CVSS:3.0/AV:L/AC...
CVE-2018-0543
Untrusted search path vulnerability in Jtrim 1.53c and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2018-0543
Untrusted search path vulnerability in Jtrim 1.53c and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
Design/Logic Flaw
Untrusted search path vulnerability in WinShot 1.53a and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2018-0544
Untrusted search path vulnerability in WinShot 1.53a and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
Design/Logic Flaw
Untrusted search path vulnerability in Jtrim 1.53c and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2018-0544
Untrusted search path vulnerability in WinShot 1.53a and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2018-0544
Untrusted search path vulnerability in WinShot 1.53a and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2018-0543
Untrusted search path vulnerability in Jtrim 1.53c and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2018-0544
CVE-2018-0544 affects WinShot 1.53a and earlier installers, due to an untrusted DLL search path (CWE-427). An attacker could load a Trojan horse DLL from a directory, executing arbitrary code with the privileges of the user invoking the installer. Reports from JVN indicate the vulnerability is co...
CVE-2018-0543
JTrim 1.53c and earlier installers are affected by an untrusted/search path DLL loading vulnerability (CWE-427). An attacker could place a Trojan horse DLL in the directory to gain privileges on user invocation. Affected component: the JTrim installer; root cause is insecure DLL search path. Impa...
Schneider Electric SoMove software and DTM software DLL Hijacking Vulnerability
SoMove software is a useful setup and FM software for Schneider Inverter users.Altivar Dtm Library is a free library that provides support for a wide range of DTM devices. A DLL hijacking vulnerability exists in Schneider Electric SoMove software and DTM software, which can be exploited by an...
Schneider Electric SoMove Software and DTM Software Components
CVSS v3 7.8 Vendor: Schneider Electric Equipment: SoMove software and DTM software components Vulnerability: Uncontrolled Search Path Element AFFECTED PRODUCTS Schneider Electric reports the vulnerability affects the following SoMove software and DTM software components: SoMove software, versions...
JVN#71816327: Installer of JTrim may insecurely load Dynamic Link Libraries
Installer of JTrim contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use ZIP file format JTrim When using JTrim, download the ZIP fi...
PostgreSQL vulnerabilities
The PostgreSQL project reports: CVE-2018-1058: Uncontrolled search path element in pgdump and other client applications...
Vulnerability in client (CVE-2018-1058)
Uncontrolled search path element in pgdump and other client applications...
OpenJDK: loading of classes from untrusted locations (I18n, 8182601)
It was discovered that the I18n component of OpenJDK could use an untrusted search path when loading resource bundle classes. A local attacker could possibly use this flaw to execute arbitrary code as another local user by making their Java application load an attacker controlled class file...
Mozilla Firefox/Thunderbird/SeaMonkey Untrusted Search Path Vulnerability
Mozilla Firefox is an open source web browser developed by the Mozilla Foundation.Thunderbird is an email client developed by the Mozilla Foundation that is independent from the Mozilla Application Suite and supports IMAP, POP mail protocols, and HTML mail. Mozilla SeaMonkey is a free, open sourc...