15655 matches found
Privilege escalation
A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.500.5102, that could allow privilege escalation...
CVE-2021-3550
A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.500.5102, that could allow privilege escalation...
CVE-2021-3550
A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.500.5102, that could allow privilege escalation...
CVE-2021-3550
CVE-2021-3550, a DLL search path vulnerability in Lenovo PCManager (prior to version 3.0.500.5102), could allow privilege escalation. Affected software is Lenovo PCManager; the vulnerability lies in DLL search path handling that could enable local privilege escalation with high impact (as per CVS...
PT-2021-20940
Name of the Vulnerable Software and Affected Versions: Lenovo PCManager versions prior to 3.0.500.5102 Description: A DLL search path issue was reported that could allow privilege escalation. Recommendations: For versions prior to 3.0.500.5102, update to version 3.0.500.5102 or later to resolve t...
CVE-2021-3550: Uncontrolled Search Path Element
A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.500.5102, that could allow privilege escalation...
VMware ThinApp DLL Hijacking
A few months ago I disclosed IBMR Db2R Windows client DLL Hijacking Vulnerability0day I found: https://seclists.org/fulldisclosure/2021/Feb/73 In that post I mentioned the vulnerability did not get fully patched. After I told IBM on hackerone that I disclosed it, hackerone asked me to delete the...
F5 BIG-IP Edge Client Windows 7.2.1 < 7.2.1.3 / 7.1.6 < 7.1.9.9 Update 1 DLL Hijacking (K33757590)
The version of the Big-IP Edge Client Windows Component Installer installed on the remote Windows host is 7.2.1 before 7.2.1.3, or between 7.1.6 and 7.1.9.9 Update 1. It is, therefore, affected by a DLL hijacking vulnerability. A local attacker can exploit this using a malicious DLL to gain...
CVE-2020-11634
The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configuration of OpenSSL. A local adversary may be able to execute arbitrary code in the SYSTEM context...
Design/Logic Flaw
The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configuration of OpenSSL. A local adversary may be able to execute arbitrary code in the SYSTEM context...
CVE-2020-11634
The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configuration of OpenSSL. A local adversary may be able to execute arbitrary code in the SYSTEM context...
CVE-2020-11634
CVE-2020-11634 affects the Zscaler Client Connector for Windows prior to version 2.1.2.105. The vulnerability is a DLL hijacking issue arising from the OpenSSL configuration, enabling a local adversary to execute arbitrary code in the SYSTEM context. The affected component is the Windows client (...
Security Bulletin: IBM Data Replication Affected by IBM Java SDK Vulnerability (CVE-2019-4732)
Summary This bulletin covers common Java SDK vulnerability findings in the IBM Java SDK packaged with this offering. Vulnerability Details CVEID: CVE-2019-4732 DESCRIPTION: IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55, and 8.0.0.0 through 8.0.6.0...
China's Cyberspies Targeting Southeast Asian Government Entities
A sweeping and "highly active campaign" that originally set its sights on Myanmar has broadened its focus to strike a number of targets located in the Philippines, according to new research. Russian cybersecurity firm Kaspersky, which first spotted the infections in October 2020, attributed them ...
Raonwiz K Upload code issue vulnerability
Raonwiz K Upload is a file transfer component from Raonwiz Korea.Raonwiz K Editor v2018.0.0.10 contains a security vulnerability that allows an attacker to perform a DLL hijacking attack on service or system restart...
PT-2021-3987
Name of the Vulnerable Software and Affected Versions Zscaler Client Connector versions prior to 2.1.2.105 Description The issue is caused by a DLL hijacking vulnerability due to the configuration of OpenSSL. This may allow a local adversary to execute arbitrary code in the SYSTEM context...
CVE-2020-11634: Uncontrolled Search Path Element
The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability caused due to the configuration of OpenSSL. A local adversary may be able to execute arbitrary code in the SYSTEM context...
Zscaler Client Connector 代码问题漏洞
Zscaler Client Connector is an application from zscaler. An application that is installed on a device to ensure that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A code...
Lexmark Driver Privilege Escalation
Various Lexmark Universal Printer drivers as listed at advisory TE953 allow low-privileged authenicated users to elevate their privileges to SYSTEM on affected Windows systems by modifying the XML file at C:\ProgramData\Universal Color Laser.gdl to replace the DLL path to unires.dll with a...
