Microsoft Edge Elevation of Privilege Vulnerability (CNVD-2020-61588)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge based on Chromium, which stems from the program failing to prompt a warning message to the user when downloading a DLL file. The...

Denial of Service Vulnerability in VisualField VF***.dll Component at Zhejiang ZDAC Information Technology Co.

VisualField VF for short is a software package for control system configuration and monitoring for the ECS-700 system. A denial of service vulnerability exists in the VisualField VF.dll component of Zhejiang ZDZC Information Technology Co. An attacker can exploit this vulnerability to cause the...

PT-2020-4217

Name of the Vulnerable Software and Affected Versions: Cisco AnyConnect Secure Mobility Client for Windows affected versions not specified Description: A vulnerability in the interprocess communication IPC channel could allow an authenticated, local attacker to perform a DLL hijacking attack. The...

The vulnerability of the installation file of the Kaspersky Security Center allows a perpetrator to increase their privileges.

The vulnerability of the installation file of the Kaspersky Security Center antivirus software is related to errors in the mechanism for checking the path to dynamically linked libraries. Exploiting this vulnerability can allow an attacker to increase their privileges...

Shenzhen Xunlei Network Technology Co., Ltd Xunlei X suffers from dll hijacking vulnerability (CNVD-2020-49286)

Founded in 2003, Shenzhen Xunlei Network Technology Co., Ltd. is a shared computing and blockchain technology innovation enterprise. Shenzhen Xunlei Network Technology Co., Ltd Xunlei X suffers from a dll hijacking vulnerability, which can be exploited by an attacker to load a malicious dll and...

Eaton 9000XDrive has a dll hijacking vulnerability

Eaton is a power management company and 9000XDrive is an inverter commissioning software. Eaton 9000XDrive suffers from a dll hijacking vulnerability that can be exploited by an attacker to load a malicious dll to execute malicious code...

Shenzhen Xunlei Network Technology Co., Ltd Xunlei Quickbird has dll hijacking vulnerability

Founded in 2003, Shenzhen Xunlei Network Technology Co., Ltd. is a shared computing and blockchain technology innovation enterprise. Shenzhen Xunlei Network Technology Co., Ltd Xunlei Quickbird suffers from a dll hijacking vulnerability, which can be exploited by an attacker to load a malicious d...

Shenzhen Xunlei Network Technology Co., Ltd Xunlei Video has dll hijacking vulnerability

Founded in 2003, Shenzhen Xunlei Network Technology Co., Ltd. is a shared computing and blockchain technology innovation enterprise. Shenzhen Xunlei Network Technology Co., Ltd Xunlei Video has a dll hijacking vulnerability, which can be exploited by an attacker to load a malicious dll and execut...

Shenzhen Xunlei Network Technology Co., Ltd Xunlei X has dll hijacking vulnerability

Founded in 2003, Shenzhen Xunlei Network Technology Co., Ltd. is a shared computing and blockchain technology innovation enterprise. Shenzhen Xunlei Network Technology Co., Ltd Xunlei X suffers from a dll hijacking vulnerability, which can be exploited by an attacker to load a malicious dll and...

CVE-2020-15722

In version 12.1.0.1004 and below of 360 Total Security,when TPI calls the browser process, there exists a local privilege escalation vulnerability. An attacker who could exploit DLL hijacking could execute arbitrary code on the Local system...

Adobe ColdFusion DLL Search Order Hijacking Vulnerability (CNVD-2020-44849)

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has a security vulnerability. An attacker could exploit the vulnerability to elevate...

Remote code execution

A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library DLL files, aka 'Microsoft Office Remote Code Execution Vulnerability'...

DLL Hijacking Vulnerability in Dahua Player

Zhejiang Dahua Technology Co., Ltd. is a leading supplier and solution provider of surveillance products. DLL hijacking vulnerability exists in Dahua Player, which can be exploited by attackers to load malicious dll and execute malicious code...

Python code issue vulnerability (CNVD-2020-53314)

Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A code issue vulnerability exists in Python Windows that stems from python3X.dll using an invalid search...

Mozilla Firefox Code Problem Vulnerability (CNVD-2020-46339)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in previous versions of Mozilla Firefox 78 for Windows-based platforms. The vulnerability can be exploited by an attacker to execute arbitrary code via a malicious DLL...

Raonwiz CyMiInstaller322 ActiveX Code Issue Vulnerability

Raonwiz CyMiInstaller322 ActiveX is a version control program from the Korean company Raonwiz. A security vulnerability exists in File Download in Raonwiz CyMiInstaller322 ActiveX 2016.5.26.1 and earlier versions, which stems from the program failing to adequately perform an authentication...

CVE-2019-19161

CyMiInstaller322 ActiveX which runs MIPLATFORM downloads files required to run applications. A vulnerability in downloading files by CyMiInstaller322 ActiveX caused by an attacker to download randomly generated DLL files and MIPLATFORM to load those DLLs due to insufficient verification...

Cloud Orange PDF Editor DLL Hijacking Vulnerability

Cloud Orange PDF Editor is a simple and easy to use PDF editing tool of Xunwu Cloud Orange Information Technology Co. Cloud Orange PDF Editor has a DLL hijacking vulnerability, which can be exploited by attackers to execute arbitrary code...

Foxit PhantomPDF code issue vulnerability (CNVD-2020-32465)

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A code issue vulnerability exists in Foxit PhantomPDF versions prior to 8.3.6. A remote attacker can exploit this vulnerability to execute code via a DLL...

Unspecified Vulnerability in Foxit Studio

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit Studio Photo versions prior to 3.6.6.922. The vulnerability can be exploited by a local attacker to gain privileges via a specially crafted DLL file in the current...