XMind has a dll hijacking vulnerability

XMind is a mind mapping software developed by Shenzhen Ice Software Technology Co., Ltd. and millions of users around the world are using XMind. XMind has a dll hijacking vulnerability that can be exploited by attackers to load a malicious dll and execute malicious code...

CVE-2019-17449

Avira Software Updater before 2.0.6.21094 allows a DLL side-loading attack. NOTE: The vendor thinks that this vulnerability is invalid because exploiting it would require at least administrator privileges and would gain only SYSTEM privileges...

Hao Chen CAD Viewing King suffers from dll hijacking vulnerability

HaoChen CAD Viewer original name: HaoChen YunDu is a free CAD software that supports all versions of dwg format drawings to open online, and is fully compatible with AutoCAD, Tianzheng CAD, etc. It is also compatible with AutoCAD, Tianzheng CAD and other CAD software. Hochen CAD Viewer has a dll...

Tencent game platform Wegame has dll hijacking vulnerability

Tencent wegame platform is an upgraded version of Tencent Game Platform TGP. Tencent wegame platform provides users with the best quality game services, supports domestic games, and also cooperates with foreign game makers to provide, including information, purchase, download, assistant, live...

CVE-2019-14960

JetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin.Repacked.dll file...

Dell Update Package Framework Code Issue Vulnerability

Dell Update Package DUP Framework is a framework for updating system components from Dell USA. The product primarily provides installers for drivers, applications, BIOS, and firmware. A code issue vulnerability exists in the Dell DUP Framework file, which can be exploited by a local attacker to...

Total Defense Anti-virus Code Issue Vulnerability

Total Defense Anti-virus is a suite of antivirus software from the American company Total Defense. Total Defense Anti-virus has a code issue vulnerability. An attacker can exploit this vulnerability to hijack the ccGUIFrm.dll file and execute code...

CVE-2019-13356

In Total Defense Anti-virus 9.0.0.773, insecure access control for the directory %PROGRAMDATA%\TotalDefense\Consumer\ISS\9\bd\TDUpdate2\ used by AMRT.exe allows local attackers to hijack bdcore.dll, which leads to privilege escalation when the AMRT service loads the DLL...

Cool Edit has a dll hijacking vulnerability

cool edit pro is a multitrack recording and audio processing software developed by Syntrillium Software. Cool Edit suffers from a dll hijacking vulnerability that can be exploited by attackers to gain server privileges...

Corel WordPerfect Office Presentations has a dll hijacking vulnerability ( CNVD-2019-36844)

Corel WordPerfect Office X9 is an office software. Corel WordPerfect Office Presentations suffers from a dll hijacking vulnerability, Presentations X9 suffers from a dll hijacking vulnerability when working with documents such as docs. An attacker can exploit the vulnerability to load a malicious...

Corel Motion Studio 3D suffers from a dll hijacking vulnerability

Corel Motion Studio 3D is a 3D film and animation creation software from Corel. Corel Motion Studio 3D suffers from a dll hijacking vulnerability when processing c3d files. An attacker can load a malicious dll and execute malicious code...

Corel WordPerfect Office Presentations suffers from a dll hijacking vulnerability

Corel WordPerfect Office X9 is an office software. Corel WordPerfect Office Presentations suffers from a dll hijacking vulnerability, which arises because Presentations X9 suffers from a dll hijacking vulnerability when processing files such as wpg. An attacker can exploit the vulnerability to lo...

XnView suffers from dll hijacking vulnerability

XnView is an image viewing software. XnView suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

CVE-2019-3646

DLL Search Order Hijacking vulnerability in Microsoft Windows client in McAfee Total Protection MTP Free Antivirus Trial 16.0.R18 and earlier allows local users to execute arbitrary code via execution from a compromised folder placed by an attacker with administrator rights...

cad quick draw suffers from dll hijacking vulnerability

Shanghai Xiaomai Technology is an Internet software and engineering data service provider for the building decoration and related manufacturing industries in China. There is a dll hijacking vulnerability in cad quick draw. An attacker can use this vulnerability to load malicious dll and execute...

cad mini viewer suffers from dll hijacking vulnerability (CNVD-2019-33721)

Shanghai Xiaomai Technology is an Internet software and engineering data service provider for the building decoration and related manufacturing industries in China. A dll hijacking vulnerability exists in cad mini viewer CNVD-C-2019-128672. An attacker can exploit the vulnerability to load a...

cad intelligent weak power has dll hijacking vulnerability

Shanghai Xiaomai Technology is an Internet software and engineering data service provider for the building decoration and related manufacturing industries in China. There is a dll hijacking vulnerability in cad intelligent weak power. Attackers can use this vulnerability to load malicious dll and...

Check Point Endpoint Security Initial Client for Windows Elevation of Privilege Vulnerability

Check Point Endpoint Security Initial Client for Windows is a Windows-based client application for Check Point Endpoint Security endpoint security management software from Check Point Israel. An elevation of privilege vulnerability exists in versions of Check Point Endpoint Security Initial Clien...

CVE-2019-7362

DLL preloading vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a DLL preloading vulnerability, which may result in code execution...

CVE-2019-7364

DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D and version 2017 of AutoCAD P&ID. An attacker may trick a user...