Foxit PDF Reader 安全漏洞

Foxit PDF Reader is a Chinese Foxit Foxit company's a PDF reader.Foxit PDF Editor is a Chinese Foxit Foxit company's a PDF editor Foxit PDF Reader and Editor has an elevation of privilege vulnerability that can be exploited by placing a DLL file in the update-service folder to elevate privileges...

The vulnerability of the update utility for microprogrammed printing systems from HP DeskJet allows a hacker to execute arbitrary code.

The vulnerability of the printer software update utility for HP DeskJet is related to an uncontrolled search path element. Exploiting this vulnerability could allow a hacker to execute arbitrary code using a specially crafted DLL file...

CVE-2024-29734

Uncontrolled search path element issue exists in SonicDICOM Media Viewer 2.3.2 and earlier, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application...

CVE-2024-29734

Uncontrolled search path element issue exists in SonicDICOM Media Viewer 2.3.2 and earlier, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application...

CVE-2024-29734

CVE-2024-29734 (SonicDICOM Media Viewer) involves an uncontrolled DLL search path element in SonicDICOM Media Viewer 2.3.2 and earlier. The root cause is a DLL search path issue (CWE-427) that may lead to insecure loading of Dynamic Link Libraries, allowing arbitrary code to execute with the priv...

Axigen 安全漏洞

Axigen is a mail server with groupware and collaboration features from Axigen, Inc. A security vulnerability exists in Axigen version 10.5.18 and earlier that originates from a vulnerability that allows a local, low-privilege attacker to execute arbitrary code and elevate privileges by loading an...

PT-2024-3033 · Vt Studio · Vt Studio

Name of the Vulnerable Software and Affected Versions: VT STUDIO versions 8.32 and earlier Description: The issue is related to an uncontrolled element of the path search, which may lead to insecurely loading Dynamic Link Libraries. This could allow a remote attacker to execute arbitrary code wit...

Vulnerability fixed in Flexera Software FlexNet Publisher

Flexera Software has fixed a vulnerability in FlexNet Publisher. A local malicious person could exploit the vulnerability to grant itself elevated privileges and execute code with elevated privileges. To exploit the vulnerability, a malicious party must load a specially prepared SSL configuration...

PT-2024-22977 · Unknown · Sonicdicom Media Viewer

Name of the Vulnerable Software and Affected Versions: SonicDICOM Media Viewer versions 2.3.2 and earlier Description: An uncontrolled search path element issue exists, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of...

CVE-2024-2209

A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmware Update Utility FUU bundle and place it in the Microsoft Windows default downloads directory which can lead to potential arbitrary code execution...

SonicDICOM Media Viewer 安全漏洞

SonicDICOM Media Viewer is a software for viewing medical image files from SonicDICOM, Inc. A security vulnerability exists in SonicDICOM Media Viewer 2.3.2 and prior versions, which stems from a contained DLL search path issue that could lead to unsafe loading of dynamic link libraries...

HP DeskJet 安全漏洞

HP DeskJet is a family of printers from Hewlett-Packard HP in the United States. A security vulnerability exists in HP DeskJet that originates from a user with administrative privileges being able to create a corrupted dll file with the same name as the original dll in the HP Printer Firmware...

Exploit for CVE-2024-22774

Panoramic Dental Imaging Software 9.1.2.7600. Phantom DLL Hij...

CVE-2024-1605

BMC Control-M branches 9.0.20 and 9.0.21 upon user login load all Dynamic Link Libraries DLL from a directory that grants Write and Read permissions to all users. Leveraging it leads to loading of a potentially malicious libraries, which will execute with the application's privileges. Fix for...

CVE-2024-1605

CVE-2024-1605 affects BMC Control-M branches 9.0.20 and 9.0.21. On user login, the app loads all DLLs from a directory that has write/read access for all users, allowing potentially malicious libraries to load and execute with the application’s privileges. The CVE details indicate the vulnerabili...

CVE-2024-1605 DLL side-loading in BMC Control-M

BMC Control-M branches 9.0.20 and 9.0.21 upon user login load all Dynamic Link Libraries DLL from a directory that grants Write and Read permissions to all users. Leveraging it leads to loading of a potentially malicious libraries, which will execute with the application's privileges. Fix for...

CVE-2024-1605 DLL side-loading in BMC Control-M

BMC Control-M branches 9.0.20 and 9.0.21 upon user login load all Dynamic Link Libraries DLL from a directory that grants Write and Read permissions to all users. Leveraging it leads to loading of a potentially malicious libraries, which will execute with the application's privileges. Fix for...

The vulnerability of the SanDisk PrivateAccess data storage and protection software for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the SanDisk PrivateAccess data storage and protection software for Windows operating systems is related to an uncontrolled search path during the loading of DLL libraries. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...

PT-2024-20751 · Appsamvid · Appsamvid

Name of the Vulnerable Software and Affected Versions: AppSamvid affected versions not specified Description: The issue exists due to the usage of vulnerable and outdated components in the software. An attacker with local administrative privileges could exploit this by placing malicious DLLs on t...

AppSamvid Security Vulnerability

AppSamvid is a free application whitelisting software from Cert-In open source. A security vulnerability exists in AppSamvid 2.0.1 and earlier versions, which originated from a vulnerability that allows an attacker with local administrative privileges to place a malicious DLL file on the target...