Lucene search
+L

977 matches found

NVD
NVD
•added 2020/03/25 6:15 p.m.•27 views

CVE-2020-3803

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

7.8CVSS8.6AI score0.0083EPSS
SaveExploits0References1
Prion
Prion
•added 2020/03/25 6:15 p.m.•26 views

Privilege escalation

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

4.4CVSS8.4AI score0.0083EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2020/03/25 5:28 p.m.•37 views

CVE-2020-3803

Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

8.5AI score0.0083EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2020/03/19 12:00 a.m.•40 views

Adobe Reader < 2015.006.30518 / 2017.011.30166 / 2020.006.20042 Multiple Vulnerabilities (APSB20-13) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 2015.006.30518, 2017.011.30166, or 2020.006.20042. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.3015...

10CVSS9.3AI score0.07581EPSS
SaveExploits0References14
OSV
OSV
•added 2020/03/12 4:15 p.m.•9 views

CVE-2020-0798

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Installer...

7.8CVSS6.9AI score0.01043EPSS
SaveExploits0References1
Prion
Prion
•added 2020/03/12 4:15 p.m.•32 views

Privilege escalation

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Installer...

7.2CVSS6.6AI score0.01214EPSS
SaveExploits0References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/12 12:00 a.m.•4 views

CVE-2020-0798: Undefined Security Weakness

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Installer...

7.8CVSS7AI score0.01043EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/03/05 12:00 a.m.•7 views

Tencent Document Dll Hijacking Vulnerability

Tencent Document is an online document that allows for multi-person collaboration. Tencent Document has a Dll hijacking vulnerability that can be exploited by attackers to load a malicious dll and execute arbitrary code...

7.5AI score
SaveExploits0
OSV
OSV
•added 2020/01/14 9:15 p.m.•12 views

CVE-2016-6592

A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6. A remote user can create a specially crafted DLL file that, when placed on the target user's system, will cause the Norton Download Manager component to load the remote user's DLL instead of the intended DLL and...

7.8CVSS6AI score0.0096EPSS
SaveExploits0References6
CNVD
CNVD
•added 2019/12/25 12:00 a.m.•18 views

DLL Hijacking Vulnerability in 2345 Ace Input Method

2345 Ace Input Method is a Chinese input software for PC launched by Shanghai 2-3-4-5 Mobile Technology Co. 2345 Ace Input Method has a DLL hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute malicious code...

7.1AI score
SaveExploits0
Prion
Prion
•added 2019/12/18 6:15 p.m.•25 views

Code injection

A dynamic library loading issue existed in iTunes setup. This was addressed with improved path searching. This issue is fixed in macOS Catalina 10.15.1, iTunes for Windows 12.10.2. Running the iTunes installer in an untrusted directory may result in arbitrary code execution...

4.4CVSS7.5AI score0.00385EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
•added 2019/12/18 5:33 p.m.•49 views

CVE-2019-8801

A dynamic library loading issue existed in iTunes setup. This was addressed with improved path searching. This issue is fixed in macOS Catalina 10.15.1, iTunes for Windows 12.10.2. Running the iTunes installer in an untrusted directory may result in arbitrary code execution...

8AI score0.00385EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/12/18 12:00 a.m.•4 views

PT-2019-19227

Name of the Vulnerable Software and Affected Versions iTunes for Windows versions prior to 12.10.2 macOS Catalina versions prior to 10.15.1 Description A dynamic library loading issue existed in iTunes setup, which could result in arbitrary code execution if the iTunes installer was run in an...

7.8CVSS0.00385EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/18 12:00 a.m.•2 views

CVE-2019-8801: Untrusted Search Path

A dynamic library loading issue existed in iTunes setup. This was addressed with improved path searching. This issue is fixed in macOS Catalina 10.15.1, iTunes for Windows 12.10.2. Running the iTunes installer in an untrusted directory may result in arbitrary code execution...

7.8CVSS7AI score0.00385EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/11/27 12:00 a.m.•21 views

STAMP Workbench Installer Code Issue Vulnerability

STAMP Workbench is a modeling tool that supports support for STAMP Systems Theory Accident Models and Processes/STPA Systems Theory Process Analysis. A code issue vulnerability exists in the STAMP Workbench installer that can be exploited by an attacker to cause unsafe loading of dynamic link...

7.8CVSS7.1AI score0.00755EPSS
SaveExploits0References1
Prion
Prion
•added 2019/11/14 4:15 p.m.•32 views

Privilege escalation

Adobe Animate CC versions 19.2.1 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

4.4CVSS7.5AI score0.00777EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2019/11/14 4:15 p.m.•36 views

Privilege escalation

Adobe Illustrator CC versions 23.1 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

4.4CVSS8.1AI score0.00779EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2019/11/14 3:07 p.m.•96 views

CVE-2019-7962

Adobe Illustrator CC versions 23.1 and earlier are affected by CVE-2019-7962 due to an insecure library loading (DLL hijacking) vulnerability. The underlying issue is loading of malicious libraries from user-writable paths, enabling privilege escalation on a local system. Affected products includ...

7.8CVSS8AI score0.00779EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/11/14 3:05 p.m.•44 views

CVE-2019-7960

Adobe Animate CC versions 19.2.1 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...

7.5AI score0.00777EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2019/11/14 12:00 a.m.•53 views

Adobe Illustrator Multiple Vulnerabilities (APSB19-36) - Windows

Adobe Illustrator is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:illustrator";...

10CVSS9.5AI score0.03985EPSS
SaveExploits0References1
Rows per page
Query Builder