Adobe Premiere Pro suffers from dll hijacking vulnerability

Adobe Premiere Pro is a video editing software. Adobe Premiere Pro has a dll hijacking vulnerability when processing prproj project files, which can be exploited by an attacker to load a malicious dll and execute malicious code...

KCodes NetUSB unauthenticated remote kernel information disclosure vulnerability

Summary An exploitable information disclosure vulnerability exists in the KCodes NetUSB.ko kernel module that enables the ReadySHARE Printer functionality of at least two NETGEAR Nighthawk Routers and potentially several other vendors/products. An unauthenticated, remote attacker can craft and se...

Adobe After Effects has a dll hijacking vulnerability

Adobe After Effects abbreviation "AE" is a graphic video processing software launched by Adobe. Adobe After Effects has a dll hijacking vulnerability when processing aep project files, which can be exploited by attackers to load a malicious dll and execute malicious code...

Adobe Prelude suffers from a dll hijacking vulnerability

Adobe Prelude is a video post-processing software. Adobe Prelude has a dll hijacking vulnerability when processing plproj project files, which can be exploited by attackers to load a malicious dll and execute malicious code...

CVE-2019-5245

HiSuite 9.1.0.300 versions and earlier contains a DLL hijacking vulnerability. This vulnerability exists due to some DLL file is loaded by HiSuite improperly. And it allows an attacker to load this DLL file of the attacker's choosing that could execute arbitrary code...

CVE-2019-10971

The application Network Configurator for DeviceNet Safety 3.41 and prior searches for resources by means of an untrusted search path that could execute a malicious .dll file not under the application's direct control and outside the intended directories...

The vulnerability of the Dynamic Application Loader component of the Intel Converged Security and Manageability Engine and the Intel Trusted Execution Engine allows attackers to enhance their privileges.

The vulnerability of the Dynamic Application Loader component of the Intel Converged Security and Manageability Engine and the Intel Trusted Execution Engine is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of DHCP and TFTP services provided by Cisco Small Business 300 Series router microprogramming systems allows a attacker to induce a service failure.

The vulnerability of DHCP and TFTP services provided by Cisco Small Business 300 Series routers is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted DHCP packets...

Fedora Update for dhcp FEDORA-2019-0370ad8310

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the Intel Dynamic Application Loader subsystem of the Intel Converged Security and Manageability Engine allows a perpetrator to enhance their privileges.

The vulnerability of the Intel Dynamic Application Loader DAL subsystem of the Intel Converged Security and Manageability Engine CSME is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

Fedora Update for bind-dyndb-ldap FEDORA-2019-0370ad8310

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: bind-dyndb-ldap-11.1-15.fc29

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

CVE-2019-12177

Privilege escalation due to insecure directory permissions affecting ViveportDesktopService in HTC VIVEPORT before 1.0.0.36 allows local attackers to escalate privileges via DLL hijacking...

The vulnerability of the synchronization identifier application in the Cisco Directory Connector lies in errors in the path validation mechanism, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the application for synchronizing identifiers in the Cisco Directory Connector is related to errors in the mechanism for checking the path of dynamically attached libraries. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

The vulnerability of the roaming_read and roaming_write functions in the OpenSSH cryptographic security tool allows a hacker to induce a service failure.

The vulnerability of the roamingread and roamingwrite functions in the OpenSSH cryptographic protection mechanism arises due to a buffer overflow in the dynamic memory. Exploiting this vulnerability allows a malicious actor to cause a service failure from a remote location...

The vulnerability of the `load_device_tree` function in the QEMU hardware emulation software allows a hacker to execute arbitrary code.

The vulnerability of the loaddevicetree function in the QEMU hardware emulation software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Schneider Electric Twidosuite software suffers from a dll hijacking vulnerability when processing xpr files

Schneider Electric Twidosuite is a programming software. The Schneider Electric Twidosuite software is vulnerable to a dll hijacking vulnerability when processing xpr files. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

CVE-2019-5589

An Unsafe Search Path vulnerability in FortiClient Online Installer Windows version before 6.0.6 may allow an unauthenticated, remote attacker with control over the directory in which FortiClientOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious .dll files...

Cross site request forgery (csrf)

EmpireCMS 7.5.0 has XSS via the from parameter to e/member/doaction.php, as demonstrated by a CSRF payload that changes the dynamic page template. The attacker can choose to resend the e/template/member/regsend.php registered activation mail page...

CVE-2019-12361

EmpireCMS 7.5.0 has XSS via the from parameter to e/member/doaction.php, as demonstrated by a CSRF payload that changes the dynamic page template. The attacker can choose to resend the e/template/member/regsend.php registered activation mail page...