Lucene search
K

77 matches found

Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/05/13 6:41 a.m.6 views

Bytello Share (Windows Edition) installer executable insecurely loads Dynamic Link Libraries

Overview GUARDIANWALL MailSuite provided by Canon Marketing Japan Inc. contains the following vulnerability. Stack-based buffer overflow in pop3wallpasswd command CWE-121 - CVE-2026-32661 The developer states that attacks exploiting the vulnerability has been observed in GUARDIANWALL MailSuite...

9.8CVSS7.5AI score0.00179EPSS
Exploits0References5
NVD
NVD
added 2026/05/13 6:16 a.m.4 views

CVE-2026-44612

Bytello Share Windows Edition installer executable provided by Bytello insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arbitrary code may be executed with the privilege of the user invoking the installer...

8.4CVSS0.00015EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/05/13 12:0 a.m.5 views

Bytello Share 代码问题漏洞

Bytello Share is a wireless screen-sharing and classroom collaboration software developed by Bytello Corporation. Bytello Share has a code vulnerability that stems from insecure loading of dynamic link libraries. This vulnerability could allow attackers to execute arbitrary code when a specially...

8.4CVSS7.5AI score0.00015EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/10 5:49 a.m.19 views

CVE-2026-28704

Emocheck insecurely loads Dynamic Link Libraries DLLs. If a crafted DLL file is placed to the same directory, an arbitrary code may be executed with the privilege of the user invoking EmoCheck...

8.4CVSS0.00015EPSS
Exploits0References3
CVE
CVE
added 2026/04/10 5:49 a.m.6 views

CVE-2026-28704

EmoCheck is affected by a DLL search/loading flaw: it insecurely loads Dynamic Link Libraries (DLLs). A crafted DLL placed in the same directory can lead to arbitrary code execution under the invoking user’s privileges. Documents do not specify the vulnerable component version, exact file or DLL ...

8.4CVSS7.3AI score0.00015EPSS
Exploits0References3
NVD
NVD
added 2026/03/26 7:16 a.m.2 views

CVE-2026-28760

The installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs. If a user is directed to place a crafted DLL with the installer, an arbitrary code may be executed with the administrator privilege...

8.4CVSS0.00007EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/26 6:54 a.m.1 views

CVE-2026-28760

The installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs. If a user is directed to place a crafted DLL with the installer, an arbitrary code may be executed with the administrator privilege...

8.4CVSS7.3AI score0.00007EPSS
Exploits0References2
CVE
CVE
added 2026/03/26 6:54 a.m.5 views

CVE-2026-28760

The vulnerability CVE-2026-28760 affects RATOC RAID Monitoring Manager for Windows. The installer loads DLLs by searching the current directory, enabling a user-directed crafted DLL to be loaded during installation, which may allow arbitrary code execution with administrator privileges. The issue...

8.4CVSS7.3AI score0.00007EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/03/06 7:51 a.m.1 views

CVE-2026-26034

UPS Multi-UPS Management Console MUMC version 01.06.0001 A03 contains an Incorrect Default Permissions CWE-276 vulnerability that allows an attacker to execute arbitrary code with SYSTEM privileges by causing the application to load a specially crafted DLL...

8.5CVSS7.4AI score0.00008EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/05 2:24 a.m.23 views

CVE-2026-26034

UPS Multi-UPS Management Console MUMC version 01.06.0001 A03 contains an Incorrect Default Permissions CWE-276 vulnerability that allows an attacker to execute arbitrary code with SYSTEM privileges by causing the application to load a specially crafted DLL...

8.5CVSS0.00008EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/26 12:0 a.m.3 views

PT-2026-4833

Name of the Vulnerable Software and Affected Versions Western Digital WD Discovery version 5.2.730 Description A flaw exists in the WD Discovery Installer that allows a local attacker to execute arbitrary code. This is possible through DLL hijacking by placing a crafted DLL in the installer’s...

8.9CVSS6.1AI score0.00042EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/01/09 9:50 a.m.1 views

CVE-2020-24003

Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process with the user's privileges to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Skype Client's microphone and camera access...

3.3CVSS6.4AI score0.00729EPSS
Exploits1References1
EUVD
EUVD
added 2026/01/09 12:0 a.m.3 views

EUVD-2026-1684

A DLL hijacking vulnerability in Axtion ODISSAAS ODIS v1.8.4 allows attackers to execute arbitrary code via a crafted DLL file...

6.5CVSS7.2AI score0.00086EPSS
Exploits0References4
EUVD
EUVD
added 2025/12/09 9:31 p.m.4 views

EUVD-2025-202316

Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to Dylib Injection. An attacker could compile a .dylib file and force the execution of this library in the context of the Sublime Text application...

6.5AI score0.00141EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/29 3:31 p.m.2 views

EUVD-2025-36642

DLL hijacking vulnerability in Evope Collector 1.1.6.9.0 and related components load the wtsapi32.dll library from an uncontrolled search path C:\ProgramData\Evope. This allows local unprivileged attackers to execute arbitrary code or escalate privileges to SYSTEM by placing a crafted DLL in that...

8.4CVSS7.1AI score0.00023EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/10/15 12:0 a.m.1 views

PT-2025-42232

RemoteCall Remote Support Program for Operator versions prior to 5.1.0 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed in the same folder with the affected product, it may cause an arbitrary code execution...

8.5CVSS7.3AI score0.00018EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-5065

Malware in sbrugna...

9.3CVSS8.8AI score0.00993EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2008-3267

Malware in sbrugna...

6.9CVSS6.1AI score0.00166EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-32232

Malicious code in bioql PyPI...

8.4CVSS6.6AI score0.00015EPSS
Exploits0References2
NVD
NVD
added 2025/10/03 8:15 a.m.3 views

CVE-2025-11223

Installer of Panasonic AutoDownloader version 1.2.8 contains an issue with the DLL search path, which may lead to loading a crafted DLL file in the same directory...

8.4CVSS0.00015EPSS
Exploits0References1
Rows per page
Query Builder