PT-2023-30455 · Sohu · Sohu Video Player

Name of the Vulnerable Software and Affected Versions: Sohu Video Player version 7.0.15.0 Description: An Untrusted search path issue allows local users to gain escalated privileges through the version.dll file in the current working directory. Recommendations: For Sohu Video Player version...

CVE-2023-47453: Uncontrolled Search Path Element

An Untrusted search path vulnerability in Sohu Video Player 7.0.15.0 allows local users to gain escalated privileges through the version.dll file in the current working directory...

CVE-2022-25969: Uncontrolled Search Path Element

The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL or some other DLLs, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer...

The vulnerability of the database update module of the WorkFlow system in the Engineering Data Management and Product Lifecycle Management system LOCMAN:PLM lies in the possibility of unlimited loading of dangerous files, allowing attackers to execute arbitrary code.

The vulnerability of the database update module of the LOCsman:PLM engineering data and product lifecycle management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow an attacker to execute arbitrary code by replacing the dll library version.dl...

PT-2021-3215

Name of the Vulnerable Software and Affected Versions LODSMAN:PLM affected versions not specified Description The issue is related to the unlimited upload of dangerous file types in the database update module of the WorkFlow system. Exploitation of this issue can allow an attacker to execute...

CVE-2015-9268

Nullsoft Scriptable Install System NSIS before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime...

Design/Logic Flaw

Nullsoft Scriptable Install System NSIS before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime...

DEBIAN-CVE-2015-9268

Nullsoft Scriptable Install System NSIS before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime...

CVE-2015-9268

Nullsoft Scriptable Install System NSIS before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime...

CVE-2015-9268

Nullsoft Scriptable Install System NSIS before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime...

CVE-2015-9268

Nullsoft Scriptable Install System NSIS before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime...

CVE-2015-9268

CVE-2015-9268 affects Nullsoft Scriptable Install System (NSIS) prior to 2.49, which has unsafe implicit linking against Version.dll. The description in the CVE notes that there is no protection mechanism to resolve the dependency at runtime, indicating a potential for misuse during installation ...

CVE-2015-9268

Nullsoft Scriptable Install System NSIS before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime...

CVE-2015-9268

Nullsoft Scriptable Install System NSIS before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime...

CVE-2015-9268: Improper Input Validation

Nullsoft Scriptable Install System NSIS before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime...

PT-2018-4577

Name of the Vulnerable Software and Affected Versions Nullsoft Scriptable Install System NSIS versions prior to 2.49 Description The issue concerns unsafe implicit linking against Version.dll, meaning there is no protection mechanism to resolve the dependency at an appropriate time during runtime...

Heimdal PRO Elevation of Privilege Vulnerability

Heimdal PRO is a suite of system security software from the American company Heimdal. The software is mainly used to protect the system's financial data security, private data security and traffic security. A security vulnerability exists in Heimdal PRO version 2.2.190. The vulnerability can be...

CVE-2018-5349

CVE-2018-5349 affects Heimdal PRO v2.2.190 (likely also Heimdal FREE/CORP). The flaw is improper permissions on C:\ProgramData\Heimdal Security\Heimdal Agent, allowing BUILTIN\Users to write files in that directory. On startup, Heimdal.MonitorServices.exe (running as SYSTEM) loads version.dll fro...

CVE-2018-5349: Incorrect Permission Assignment for Critical Resource

A vulnerability has been found in Heimdal PRO v2.2.190, but it is most likely also present in Heimdal FREE and Heimdal CORP. Faulty permissions on the directory "C:\ProgramData\Heimdal Security\Heimdal Agent" allow BUILTIN\Users to write new files to the directory. On startup, the process...

PT-2018-16913

Name of the Vulnerable Software and Affected Versions Heimdal PRO version 2.2.190 Heimdal FREE affected versions not specified Heimdal CORP affected versions not specified Description A vulnerability has been found that allows for privilege escalation due to faulty permissions on the directory...