HCL Notes 缓冲区错误漏洞

HCL Notes is an email software from HCL India. The software supports access to emails, calendars, contacts, etc. HCL Notes suffers from a buffer error vulnerability that stems from vulnerability to a stack-based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView, which can be...

PT-2022-27985 · Jetbrains · Jetbrains Intellij Idea

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2022.3 Description: The issue allows for a DYLIB injection on macOS. This means that an attacker could potentially inject malicious code into the system. No information is provided about the estimated...

JetBrains IntelliJ IDEA 代码问题漏洞

JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from the Czech company JetBrains. A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2022.3, which stems from a DYLIB injection that can be performed on macOS...

PT-2022-7153 · Autodesk · Autodesk Installer

Name of the Vulnerable Software and Affected Versions: Autodesk Installer affected versions not specified Description: The issue is related to a maliciously crafted DLL file that can be forced to write beyond allocated boundaries when the Autodesk installer parses the DLL files. This could lead t...

LG Smart Share 代码问题漏洞

LG Smart Share is a smart sharing software from the South Korean company Lakin LG. A security vulnerability exists in LG Smart Share that originates from a local elevation of privilege via a DLL hijacking attack during installation...

Qt 代码问题漏洞

Qt is a cross-platform C++ application development framework from the Norwegian company Qt. It is widely used to develop GUI programs, in which case it is also known as the widget toolkit. It can also be used to develop non-GUI programs, such as console tools and servers. A security vulnerability...

Zoom Client 代码问题漏洞

Zoom Client is a video conferencing client application from Zoom Inc. that supports multiple platforms. A security vulnerability exists in Zoom Client for Meetings, which stems from being affected by a DLL injection vulnerability...

PT-2022-5830 · Zoom · Zoom Rooms For Conference Room +2

Name of the Vulnerable Software and Affected Versions: Zoom Client for Meetings versions prior to 5.12.6 Zoom Rooms for Conference Room versions prior to 5.12.6 Description: The issue is related to incorrect code generation management in the Zoom service for video conferencing. Exploitation of th...

Dell GeoDrive 代码问题漏洞

Dell GeoDrive is a free application from Dell Inc. It provides access to Dell EMC ECS and Atmos storage from Microsoft Windows desktops and servers. A DLL hijacking vulnerability exists in Dell GeoDrive versions prior to 2.2.3, which can be exploited by an attacker to execute arbitrary code on a...

PT-2022-5833 · Unknown · Content Transfer

Name of the Vulnerable Software and Affected Versions: Content Transfer for Windows versions 1.3 and prior Description: The issue is related to an untrusted search path vulnerability in the installer. This could allow an attacker to elevate privileges by using a specially crafted DLL. The...

Notepad++ 代码问题漏洞

Notepad++ is an open source plain text editor by Don Ho, an individual developer in Taiwan, China. A code issue vulnerability exists in Notepad++ 8.4.1 and earlier versions, which stems from susceptibility to DLL hijacking, and can be exploited to replace a vulnerable dll UxTheme.dll with a dll o...

The vulnerability of the McAfee Smart Installer, a antivirus software tool developed by McAfee, allows a hacker to execute arbitrary code or enhance their privileges on Windows operating systems.

The vulnerability of the McAfee Smart Installer, a antivirus software tool developed by McAfee, exists on Windows operating systems. It involves the possibility of replacing the dynamic library. Exploiting this vulnerability allows an attacker to execute arbitrary code or increase their privilege...

CVE-2022-38611

Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a DLL hijacking attack and execute arbitrary code via a crafted binary...

Honeywell SoftMaster 代码问题漏洞

Honeywell SoftMaster is a software program from Honeywell USA. Honeywell SoftMaster suffers from a code issue vulnerability that stems from the fact that if an attacker manages to trick a valid user into loading a malicious DLL, then the attacker can execute code within the context and privileges...

The vulnerability of the performance optimization tool of the HP Performance Tune-up software, a software solution for automated support and driver updates by HP Support Assistant, allows a hacker to execute arbitrary code.

The vulnerability of the HP Performance Tune-up performance optimization tool, a software solution for automated support and driver updates by HP Support Assistant, lies in the possibility of replacing the dynamic library. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2022-36403

Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2022-36271

Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is missing so an attacker can use a malicious dll with same name and can get admin privileges...

Outbyte PC Repair 代码问题漏洞

Outbyte PC Repair is a comprehensive computer repair tool from Outbyte. Designed to solve a range of different system problems, clean up drives, optimize performance and improve your privacy and security. A security vulnerability exists in Outbyte PC Repair Installation File version 1.7.112.7856,...

CVE-2022-28884

A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine...

CVE-2022-2334

The application searches for a library dll that is not found. If an attacker can place a dll with this name, then the attacker can leverage it to execute arbitrary code on the targeted Softing Secure Integration Server V1.22...