CVE-2024-44346

CVE開示: CVE-2024-44346 日付: 13-09-2024 概要 Tosibox tbsetup.exe バージョン 4.0.0.0 に脆弱性が確認され、ローカル権限昇格が可能となる可能性があります。この問題には識別子 CVE-2024-44346 が割り当てられています。ベンダーは詳細と修正手順を含むアドバイザリを公開しています。 影響を受ける製品 ベンダー : Tosibox 製品 : tbsetup.exe バージョン : 4.0.0.0 脆弱性の説明 Tosibox Key ソフトウェアにおいて、Tosibox Key インストーラー tbsetup.exe...

CVE-2024-44346

CVE 開示: CVE-2024-44346 日付: 2024年9月13日 概要 Tosibox の tbsetup.exe バージョン 4.0.0.0 に、ローカル権限昇格を許す可能性のある脆弱性が確認されました。この問題には識別子 CVE-2024-44346 が割り当てられています。ベンダーは、詳細と是正手順を含むアドバイザリを公開しています。 影響を受ける製品 ベンダー : Tosibox 製品 : tbsetup.exe バージョン : 4.0.0.0 脆弱性の説明 Tosibox は、Tosibox Key...

CVE-2024-10930

CVE 開示: CVE-2024-10930 CVE-2024-10930 の公開開示 日付: 2025年2月12日 概要 Carrier 製品 E20-BLK416X.EXE バージョン 4.16 に、ローカル権限昇格を可能にする可能性のある脆弱性が特定されました。この問題には識別子 CVE-2024-10930 が割り当てられています。ベンダーは、詳細と修復手順を記載したアドバイザリを公開する予定です。 影響を受ける製品 ベンダー : Carrier 製品 : E20-BLK416X.EXE バージョン : 4.16 更新バージョン : 4.2 脆弱性の説明 Carrier...

CVE-2026-13133

A vulnerability has been identified in LineInst.exe LINE for Windows prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy...

EUVD-2026-55033

A vulnerability has been identified in LineInst.exe LINE for Windows prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy...

CVE-2026-13133

LineInst.exe (LINE for Windows) before version 26.4.0 is vulnerable because Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer directory to be loaded ahead of the legitimate System32 copy. The CVSS metrics indicate a HIGH ...

CVE-2026-13133

A vulnerability has been identified in LineInst.exe LINE for Windows prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy...

CVE-2026-13133

A vulnerability has been identified in LineInst.exe LINE for Windows prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory to be loaded ahead of the legitimate System32 copy...

CVE-2026-22561

Uncontrolled search path elements in Anthropic Claude for Windows installer Claude Setup.exe versions prior to 1.1.3363 allow local privilege escalation via DLL search-order hijacking. The installer loads DLLs e.g., profapi.dll from its own directory after UAC elevation, enabling arbitrary code...

CVE-2026-3091

An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files during installation by placing a malicious DLL in advance in the same directory as the installer...

CVE-2026-3091

An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of-service during installation by placing a malicious DLL in advance in the same directory as the installer...

CVE-2026-3091

The CVE-2026-3091 entry covers an Uncontrolled Search Path Element vulnerability in Synology Presto Client prior to 2.1.3-0672. The issue allows local users to read or write arbitrary files and can cause denial of service during installation by placing a malicious DLL in the same directory as the...

EUVD-2024-22279

Malicious code in bioql PyPI...

CVE-2025-9267

In Seagate Toolkit on Windows a vulnerability exists in the Toolkit Installer prior to versions 2.35.0.6 where it attempts to load DLLs from the current working directory without validating their origin or integrity. This behavior can be exploited by placing a malicious DLL in the same directory ...

CVE-2018-25114

OSCommerce Online Merchant 2.3.4.1 : Remote code execution via insecure installer workflow. Unauthenticated attackers can access the install_4.php endpoint in an accessible /install/ directory and inject PHP code into configure.php, which is executed when included by the app. Affected component: ...

CVE-2024-24916

Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges admin...

CVE-2024-24916

Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges admin...

CVE-2024-24916 DLL-HiJacking

Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges admin...

Check Point SmartConsole 安全漏洞

Check Point SmartConsole is a graphical user interface for centralized management of Check Point security products from Check Point Israel. A security vulnerability exists in Check Point SmartConsole versions R81.10 and R81.20 that originates from an untrusted DLL in the installer directory that...

CVE-2019-9002

An issue was discovered in Tiny Issue 1.3.1 and pixeline Bugs through 1.3.2c. install/config-setup.php allows remote attackers to execute arbitrary PHP code via the databasehost parameter if the installer remains present in its original directory after installation is completed...