1560 matches found
The vulnerability of the Rockwell Automation Emulate3D software for virtual modeling of equipment and manufacturing processes lies in improper external control of file names or file paths, allowing a hacker to execute arbitrary code.
The vulnerability of the Rockwell Automation Emulate3D software for virtual modeling of equipment and manufacturing processes is related to improper external manipulation of file names or DLL files during library loading. Exploiting this vulnerability allows an attacker to execute arbitrary code...
PT-2024-38611 · Webroot · Webroot Secureanywhere - Web Shield
Name of the Vulnerable Software and Affected Versions: Webroot SecureAnywhere - Web Shield versions prior to 2.1.2.3 Description: The issue is related to an Improper Check for Unusual or Exceptional Conditions vulnerability in the wrURL.Dll modules of Webroot SecureAnywhere - Web Shield, allowing...
PT-2024-31826 · Vegabird · Vegabird Vooki
Name of the Vulnerable Software and Affected Versions: VegaBird Vooki version 5.2.9 Description: A DLL hijacking issue allows attackers to execute arbitrary code and maintain persistence by placing a crafted DLL file in the same directory as Vooki.exe. This enables attackers to potentially gain...
e-Tax Reception System 安全漏洞
The e-Tax Reception System is an electronic tax management system organized by the National Tax Agency NTA of Japan. A security vulnerability exists in e-Tax Reception System that originates from allowing the upload of malicious DLL files...
PT-2024-25642
Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Cloud Agent Windows versions before build 38235 Description A local privilege escalation issue exists due to a DLL hijacking vulnerability. This can cause local privilege escalation. Recommendations For Acronis Cyber...
Acronis Cyber Protect 代码问题漏洞
Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Switzerland. Combining backup, anti-malware, network security and endpoint management features such as vulnerability assessment, URL filtering, patch management and more. A code issue...
CVE-2024-45281
SAP BusinessObjects Business Intelligence Platform allows a high privilege user to run client desktop applications even if some of the DLLs are not digitally signed or if the signature is broken. The attacker needs to have local access to the vulnerable system to perform DLL related tasks. This...
The vulnerability of the Yandex Browser is related to the use of an insecure search path, which allows a hacker to execute arbitrary code.
The vulnerability of the Yandex Browser is related to the use of an insecure search path. Exploiting this vulnerability allows a hacker to execute arbitrary code by loading a specially crafted DLL file...
CVE-2024-7834
A local privilege escalation is caused by Overwolf loading and executing certain dynamic link library files from a user-writeable folder in SYSTEM context on launch. This allows an attacker with unprivileged access to the system to run arbitrary code with SYSTEM privileges by placing a malicious...
CVE-2024-7834 Local privilege escalation in Overwolf
A local privilege escalation is caused by Overwolf loading and executing certain dynamic link library files from a user-writeable folder in SYSTEM context on launch. This allows an attacker with unprivileged access to the system to run arbitrary code with SYSTEM privileges by placing a malicious...
CVE-2024-7834
The CVE-2024-7834 entry concerns Overwolf. Affected: Overwolf software (frames/SDK) that loads and executes certain DLLs from a user-writable folder during startup, running in SYSTEM context. Root cause: untrusted DLLs placed in the user-writable location are loaded on launch, enabling local priv...
CVE-2024-7834 Local privilege escalation in Overwolf
A local privilege escalation is caused by Overwolf loading and executing certain dynamic link library files from a user-writeable folder in SYSTEM context on launch. This allows an attacker with unprivileged access to the system to run arbitrary code with SYSTEM privileges by placing a malicious...
Overwolf 安全漏洞
Overwolf is a framework from the Israeli company Overwolf that supports building games using HTML and JavaScript. A security vulnerability exists in Overwolf versions prior to 250.1.1, which originates from loading and executing certain dynamic link library files from a user-writable folder in th...
PT-2024-38613 · Overwolf · Overwolf
Name of the Vulnerable Software and Affected Versions: Overwolf affected versions not specified Description: A local privilege escalation issue is caused by Overwolf loading and executing certain dynamic link library files from a user-writeable folder in SYSTEM context on launch. This allows an...
Yandex Browser 安全漏洞
Yandex Browser is a desktop version of the web browser from the Russian company Yandex. A security vulnerability exists in Yandex Browser versions prior to 24.7.1.380, which stems from the use of an untrusted search path, which leads to a DLL hijacking vulnerability...
Acronis Snap Deploy 代码问题漏洞
Acronis Snap Deploy is a platform for bulk deployment of system images from Acronis Singapore. A code issue vulnerability previously existed in Acronis Snap Deploy version 4569, which stemmed from the inclusion of a DLL hijacking vulnerability leading to local elevation of privilege...
Acronis Snap Deploy 代码问题漏洞
Acronis Snap Deploy is a platform for bulk deployment of system images from Acronis Singapore. A code issue vulnerability previously existed in Acronis Snap Deploy version 4569, which stemmed from the inclusion of a DLL hijacking vulnerability leading to local elevation of privilege...
Installer of Trend Micro Security 2020 (Consumer) may insecurely load Dynamic Link Libraries
Overview Installers of Trend Micro Security 2020 Consumer family may insecurely load Dynamic Link Libraries. Multiple products provided by Trend Micro Incorporated contain the DLL search path issue, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Trend Micro Incorporated...
PT-2024-7533 · Autodesk · Autodesk Autocad
Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to a Use-After-Free vulnerability in the libodxdll.dll library when parsing a maliciously crafted MODEL file in Autodesk AutoCAD. This can be exploited by a...
