Softing Secure Integration Server 路径遍历漏洞

Softing Secure Integration Server is a secure integration server from Softing Germany. It provides a powerful OPC UA data integration layer and supports interface abstraction, aggregation, data preprocessing and security supervision. A path traversal vulnerability exists in Softing Secure...

F-Secure Atlant 安全漏洞

F-Secure Atlant is a platform from the Finnish company F-Secure for building applications that can scan and detect malicious files. A security vulnerability exists in F-Secure Atlant that stems from a crash in the aerdl.dll component, which causes the scanning engine to crash...

SAMSUNG Mobile devices 代码问题漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices Samsung Update Setup prior to version 2.2.9.50, which stems from a DLL hijacking vulnerability that can...

PT-2022-23644 · Samsung · Samsung Update Setup

Name of the Vulnerable Software and Affected Versions: Samsung Update Setup versions prior to 2.2.9.50 Description: The issue allows attackers to execute arbitrary code through a DLL hijacking vulnerability. Recommendations: For versions prior to 2.2.9.50, update to version 2.2.9.50 or later to...

PT-2022-10717 · Aveva · Aveva Software Platform Common Services (Pcs) Portal

Name of the Vulnerable Software and Affected Versions: AVEVA Software Platform Common Services PCS Portal versions 4.4.6, 4.5.0, 4.5.1, 4.5.2 Description: The issue is related to DLL hijacking through an uncontrolled search path element. This may allow an attacker to control one or more locations...

PT-2022-4816 · Unknown · Ma Smart Installer

Name of the Vulnerable Software and Affected Versions: MA Smart Installer for Windows versions prior to 5.7.7 Description: The issue is related to a DLL hijacking vulnerability, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DL...

Dell EMC PowerStore 代码问题漏洞

Dell EMC PowerStore is a storage device from Dell USA. A security vulnerability exists in Dell EMC PowerStore v3.0.0.0 and earlier versions, which originates from a DLL hijacking vulnerability that can be exploited by an attacker to execute arbitrary code, elevate privileges, and bypass software...

CVE-2021-45492

In Sage 300 ERP formerly accpac through 6.8.x, the installer configures the C:\Sage\Sage300\Runtime directory to be the first entry in the system-wide PATH environment variable. However, this directory is writable by unprivileged users because the Sage installer fails to set explicit permissions...

CVE-2022-32223

Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows platforms.This vulnerability can be exploited if the victim has the following dependencies on a Windows machine: OpenSSL has been installed and “C:\Program Files\Common Files\SSL\openssl.cnf”...

UBUNTU-CVE-2022-32223

Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows platforms.This vulnerability can be exploited if the victim has the following dependencies on a Windows machine: OpenSSL has been installed and “C:\Program Files\Common Files\SSL\openssl.cnf”...

Druva 代码问题漏洞

Druva is a large-scale SaaS platform from US-based Druva, Inc. bringing the simplicity, scalability and security of the public cloud to enterprise data protection and management. A security vulnerability exists in Druva version 6.9.0 in macOS, which stems from a vulnerability that allows an...

NoMachine 安全漏洞

NoMachine is a remote desktop access tool from Luxembourg-based NoMachine. v7.9.2 of NoMachine is vulnerable to an authorization issue that originates from incorrect permissions in the C:ProgramDataNoMachinevaruninstall folder. An attacker could exploit this vulnerability to hijack the DLL and...

Naver Cloud Explorer 代码问题漏洞

Naver Cloud Explorer is a browser for accessing cloud files in Naver by Naver Korea. A security vulnerability exists in Naver Cloud Explorer. An attacker can exploit this vulnerability to execute arbitrary code with System privileges via malicious DLL injection...

Vulnerability of the CrlPlatform.dll library in the CorelDRAW Standard graphic editor, which allows a hacker to gain unauthorized access to protected information.

The vulnerability of the CrlPlatform.dll library, which is part of the CorelDRAW Standard graphic editor, relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using a specially crafted CDR fi...

CVE-2022-32270

In Real Player 20.0.7.309 and 20.0.8.310, external::Import allows download of arbitrary file types and Directory Traversal, leading to Remote Code Execution. This occurs because it is possible to plant executables in the startup folder DLL planting could also occur...

Trend Micro Apex One 代码问题漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. Trend Micro Apex One suffers from a code issue vulnerability that stems from the presence of uncontrolled search path elements in the application. A local attacker could use this vulnerability to load a DLL on an affected...

CVE-2022-31467

A DLL hijacking vulnerability in the installed for Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, leading to execution of arbitrary code, via the installer not restricting the search path for required DLLs and then not verifying the signature...

CVE-2022-28964

An arbitrary file write vulnerability in Avast Premium Security before v21.11.2500 build 21.11.6809.528 allows attackers to cause a Denial of Service DoS via a crafted DLL file...

CVE-2022-28965

Multiple DLL hijacking vulnerabilities via the components instup.exe and wscproxy.exe in Avast Premium Security before v21.11.2500 allows attackers to execute arbitrary code or cause a Denial of Service DoS via a crafted DLL file...

The vulnerability of the ViPNet Client’s software-hardware protection system lies in its ability to replace the dynamic library, allowing an attacker to execute arbitrary code.

The vulnerability of the ViPNet Client software lies in the possibility of replacing the dynamic library. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially crafted dynamic library...