131 matches found
CVE-2021-25698
The OpenSSL component of the Teradici PCoIP Standard Agent prior to version 21.07.0 was compiled without the no-autoload-config option, which allowed an attacker to elevate to the privileges of the running process via placing a specially crafted dll in a build configuration directory...
CVE-2020-13813
An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory when FoxitStudioPhoto3663.6.6.916.exe is used...
CVE-2025-42598
Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when installed or used in a language other than English. If a user is directed to place a crafted DLL file in a location of an attacker's choosing, the attacker may execute arbitrary cod...
CVE-2025-42598
Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when installed or used in a language other than English. If a user is directed to place a crafted DLL file in a location of an attacker's choosing, the attacker may execute arbitrary cod...
CVE-2025-42598
Multiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access permission settings when installed or used in a language other than English. If a user is directed to place a crafted DLL file in a location of an attacker's choosing, the attacker may execute arbitrary cod...
CVE-2025-42598
CVE-2025-42598 affects multiple SEIKO EPSON printer drivers for Windows. The issue stems from improper access permission settings in non‑English environments, enabling a user‑driven attack to place a crafted DLL in an attacker‑controlled location and execute arbitrary code with SYSTEM privileges ...
CVE-2024-9500
A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to insecure privilege management...
The vulnerability of the Microsoft.SqlServer.XEvent.Configuration.dll file in the Microsoft SQL Server relational database management system allows a attacker to execute arbitrary code.
The vulnerability of the Microsoft.SqlServer.XEvent.Configuration.dll file in the Microsoft SQL Server database management system is related to the use of an insecure search path. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created DLL...
CVE-2024-53588
A DLL hijacking vulnerability in iTop VPN v16.0 allows attackers to execute arbitrary code via placing a crafted DLL file into the path \ProgramData\iTop VPN\Downloader\vpn6...
CVE-2024-53588
A DLL hijacking vulnerability in iTop VPN v16.0 allows attackers to execute arbitrary code via placing a crafted DLL file into the path \ProgramData\iTop VPN\Downloader\vpn6...
Bitdefender Antivirus Free 代码问题漏洞
Bitdefender Antivirus Free is a free version of a suite of antivirus software from the Romanian company Bitdefender that primarily provides cyber threat detection and ransomware protection. Bitdefender Antivirus Free 2020 suffers from a code issue vulnerability that stems from an untrusted search...
PT-2025-1350 · Bitdefender · Bitdefender Antivirus Free 2020
Name of the Vulnerable Software and Affected Versions: Bitdefender Antivirus Free 2020 Description: An untrusted search path vulnerability in testinitsigs.exe allows a low-privilege attacker to execute code as SYSTEM via a specially crafted DLL file. This issue enables an attacker to gain elevate...
CVE-2024-8300
Dead Code vulnerability in Mitsubishi Electric GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric Iconics Digital Solutions GENESIS64 Version 10.97.2, 10.97.2 CFR1, 10.97.2 CRF2 and 10.97.3, Mitsubishi Electric ICONICS Suite Version 10.97.2, 10.97.2 CFR1, 10.97...
CVE-2024-9852
Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric GENESIS32 all versions, Mitsubishi Electric...
CVE-2024-8299
Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric Hyper Historian versions 10.97.3 and prior, Mitsubishi Electric GENESIS32 all versions, Mitsubishi Electric...
CVE-2024-8299
CVE-2024-8299 is an Uncontrolled Search Path Element vulnerability affecting ICONICS GENESIS64, ICONICS Suite, MC Works64, and GENESIS32 (all versions). The root cause is DLL hijacking via a local, authenticated attacker storing a specially crafted DLL in a target folder, enabling arbitrary code ...
PT-2024-8832
Name of the Vulnerable Software and Affected Versions ICONICS GENESIS64 all versions Mitsubishi Electric GENESIS64 all versions Mitsubishi Electric MC Works64 all versions Description The issue is related to an uncontrolled search path element, which can be exploited by a local authenticated...
UBUNTU-CVE-2024-50986
An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file...
CVE-2024-50986
CVE-2024-50986 affects Clementine v1.3.1 and is exploitable via a local DLL hijacking/vector in Windows. A concrete PoC from a GitHub exploit shows that placing a crafted QUSEREX.DLL in C:\Users\AppData\Local\Microsoft\WindowsApps allows Clementine to load the malicious DLL at startup, enabling a...