9272 matches found
PT-2016-5493
Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 8.1.1, 8.2.2, IP2014, IP2015, and IP2016 Description The issue affects the confidentiality of the system, allowing remote authenticated users to exploit it via vectors related to the Web Server in the Siebel...
NetMove SaAT Netizen and SaAT Netizen installer arbitrary code execution vulnerability
NetMove SaAT Netizen and SaAT Netizen installer are both products of NetMove Japan. The former is a set of security software and the latter is an installer for SaAT Netizen. An arbitrary code execution vulnerability exists in NetMove SaAT Netizen installer 1.2.0.424 and earlier and SaAT Netizen...
CVE-2016-4831
Untrusted search path vulnerability in LINE and LINE Installer 4.7.0 and earlier on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...
Design/Logic Flaw
Untrusted search path vulnerability in LINE and LINE Installer 4.7.0 and earlier on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2016-4831
Untrusted search path vulnerability in LINE and LINE Installer 4.7.0 and earlier on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2016-4831
Consolidated details from multiple sources show that CVE-2016-4831 affects LINE for Windows and LINE Installer (versions ≤ 4.7.0) due to an insecure DLL search path. The root cause is loading a Trojan horse DLL from an unspecified directory, enabling arbitrary code execution with the privileges o...
CVE-2016-4831: Undefined Security Weakness
Untrusted search path vulnerability in LINE and LINE Installer 4.7.0 and earlier on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...
PT-2016-6172
Name of the Vulnerable Software and Affected Versions LINE versions 4.7.0 and earlier LINE Installer versions 4.7.0 and earlier Description The issue allows local users to gain privileges via a Trojan horse DLL in an unspecified directory. This is due to an untrusted search path vulnerability...
LINE for Windows may insecurely load Dynamic Link Libraries
Overview LINE for Windows provided by LINE Corporation contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Takashi Yoshikawa of Mitsui Bussan Secure Directions reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...
InstantHMI 6.1 - Local Privilege Escalation
InstantHMI 6.1 - Local Privilege Escalation Title: InstantHMI - EoP: User to ADMIN CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: Software Horizons Product: InstantHMI Version: 6.1 Download link: http://www.instanthmi.com/ihmisoftware.htm Tested on: Windows 7 x86, full...
Hide.Me VPN Client 1.2.4 - Local Privilege Escalation
Hide.Me VPN Client 1.2.4 - Local Privilege Escalation Title: Hide.Me VPN Client - EoP: User to SYSTEM CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: eVenture Product: Hide.Me VPN Client Version: 1.2.4 Download link: https://hide.me/en/software/windows Tested on: Window...
InstantHMI 6.1 - Local Privilege Escalation
Title: InstantHMI - EoP: User to ADMIN CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: Software Horizons Product: InstantHMI Version: 6.1 Download link: http://www.instanthmi.com/ihmisoftware.htm Tested on: Windows 7 x86, fully patched Release mode: no bugbounty program...
Hide.Me VPN Client 1.2.4 - Privilege Escalation
Exploit for windows platform in category local exploits Title: Hide.Me VPN Client - EoP: User to SYSTEM CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: eVenture Product: Hide.Me VPN Client Version: 1.2.4 Download link: https://hide.me/en/software/windows Tested on:...
Hide.Me VPN Client 1.2.4 Privilege Escalation
Title: Hide.Me VPN Client - EoP: User to SYSTEM CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: eVenture Product: Hide.Me VPN Client Version: 1.2.4 Download link: https://hide.me/en/software/windows Tested on: Windows 7 x86, fully patched Release mode: no bugbounty...
InstantHMI 6.1 Privilege Escalation
itle: InstantHMI - EoP: User to ADMIN CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: Software Horizons Product: InstantHMI Version: 6.1 Download link: http://www.instanthmi.com/ihmisoftware.htm Tested on: Windows 7 x86, fully patched Release mode: no bugbounty program,...
InstantHMI 6.1 - Privilege Escalation
Exploit for windows platform in category local exploits Title: InstantHMI - EoP: User to ADMIN CWE Class: CWE-276: Incorrect Default Permissions Date: 01/06/2016 Vendor: Software Horizons Product: InstantHMI Version: 6.1 Download link: http://www.instanthmi.com/ihmisoftware.htm Tested on: Windows...
Python 3.5.2 DLL Hijacking
Aloha, python-3.5.2.exe loads and executes fwbase.dll from its "application directory". For software downloaded with a web browser the applicationdirectory is typically the user's "Downloads" directory: see , and for "prior art" about this well-known and well-documented vulnerability. If an...
The vulnerability of the Windows operating system, which allows a hacker to increase their privileges
A vulnerability that allows for increased privileges exists in the Windows installer. This vulnerability is related to incorrect restoration of previously installed applications. If this vulnerability is exploited successfully, a malicious individual will be able to execute arbitrary code at the...
CVE-2016-4157
Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory...
CVE-2016-4157
Untrusted search path vulnerability in the installer in Adobe Creative Cloud Desktop Application before 3.7.0.272 on Windows allows local users to gain privileges via a Trojan horse resource in an unspecified directory...