Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program Untrusted Search Path Vulnerability

Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program is a basic statistical report program for the petroleum industry by the Agency for Natural Resources and Energy of Ministry, Trade and Industry METI in Japan. Installer is one of the installation programs. An untrusted search path vulnerabili...

CVE-2017-11160: Untrusted Search Path

Multiple untrusted search path vulnerabilities in installer in Synology Assistant before 6.1-15163 on Windows allows local attackers to execute arbitrary code and conduct DLL hijacking attack via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in the current worki...

PT-2017-11531

Name of the Vulnerable Software and Affected Versions Shin Kinkyuji Houkoku Data Nyuryoku Program version released on 2011 March 10 Description The issue is related to an untrusted search path vulnerability in the Installer for the program. This vulnerability allows an attacker to gain privileges...

CVE-2017-10823: Untrusted Search Path

Untrusted search path vulnerability in Installer for Shin Kinkyuji Houkoku Data Nyuryoku Program program released on 2011 March 10 Distributed on the website till 2017 May 17 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

PT-2017-11529

Name of the Vulnerable Software and Affected Versions Shin Kikan Toukei Houkoku Data Nyuryokuyou Program version released on 2013 September 30 Description The issue is related to an untrusted search path vulnerability in the Installer for the program. This allows an attacker to gain privileges vi...

Installer of Shin Kikan Toukei Houkoku Data Untrusted Search Path Vulnerability

Shin Kinkyuji Houkoku Data Nyuryoku Program is a data entry program for basic statistical reports for the petroleum industry from the Agency for Natural Resources and Energy of Ministry, Trade and Industry METI in Japan. Installer is one of the installation programs. An untrusted search path...

CVE-2017-2289: Untrusted Search Path

Untrusted search path vulnerability in Installer of Qua station connection tool for Windows version 1.00.03 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10821: Untrusted Search Path

Untrusted search path vulnerability in Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou Program program released on 2013 September 30 Distributed on the website until 2017 May 17 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10822: Untrusted Search Path

Untrusted search path vulnerability in Installer for Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program program released on 2013 September 30 distributed on the website until 2017 May 17 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

PT-2017-15329

Name of the Vulnerable Software and Affected Versions Qua station connection tool for Windows version 1.00.03 Description The issue concerns an untrusted search path vulnerability in the Installer of the Qua station connection tool. This vulnerability allows an attacker to gain privileges by usin...

PT-2017-11530

Name of the Vulnerable Software and Affected Versions Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program version released on 2013 September 30 Description The issue is related to an untrusted search path vulnerability in the Installer for the program. This allows an attacker to gain privilege...

Installer of Shin Kinkyuji Houkoku Data Nyuryoku Program may insecurely load Dynamic Link Libraries

Overview Installer of Shin Kinkyuji Houkoku Data Nyuryoku Program provided by Agency for Natural Resources and Energy of METI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability ...

Installer of Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program may insecurely load Dynamic Link Libraries

Overview Installer of Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program provided by Agency for Natural Resources and Energy of METI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this...

Installer of Shin Kikan Toukei Houkoku Data Nyuryokuyou Program may insecurely load Dynamic Link Libraries

Overview Installer of Shin Kikan Toukei Houkoku Data Nyuryokuyou Program provided by Agency for Natural Resources and Energy of METI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this...

JVN#23546631: Installer of Shin Kinkyuji Houkoku Data Nyuryoku Program may insecurely load Dynamic Link Libraries

Installer of Shin Kinkyuji Houkoku Data Nyuryoku Program provided by Agency for Natural Resources and Energy of METI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the use...

Bye Bye Password,1.0.4,Information Disclosure

Bye Bye Password by Ready Bytes, versions 1.0.4 and previous, Information Disclosure Also the installer includes a tracking script...

JVN#71104430: Installer of Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program may insecurely load Dynamic Link Libraries

Installer of Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program provided by Agency for Natural Resources and Energy of METI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege...

CVE-2017-12892

Foxit PDF Compressor installers from versions from 7.0.0.183 to 7.7.2.10 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer...

CVE-2017-12892

Foxit PDF Compressor installers (versions 7.0.0.183 through 7.7.2.10) are affected by a DLL preloading vulnerability. The issue arises because the installer can load a malicious DLL located in its current working directory, enabling potential code execution during installation. CVE-2017-12892 is ...

CVE-2017-12892: Untrusted Search Path

Foxit PDF Compressor installers from versions from 7.0.0.183 to 7.7.2.10 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer...