Schneider Electric Twidosuite software suffers from a dll hijacking vulnerability when processing xpr files

Schneider Electric Twidosuite is a programming software. The Schneider Electric Twidosuite software is vulnerable to a dll hijacking vulnerability when processing xpr files. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

schneider Vijeo Designer suffers from dll hijacking vulnerability

Schneider Electric SA is a global electrical company headquartered in France and a global specialist in energy efficiency management and automation. A dll hijacking vulnerability exists in schneider Vijeo Designer. An attacker can exploit this vulnerability to load a malicious dll and execute...

Fortinet FortiClient Code Execution Vulnerability

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A security vulnerability exists in Fortinet FortiClient...

Foxit Reader and Foxit PhantomPDF for Windows Information Disclosure Vulnerability (CNVD-2019-13811)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in the ConvertToPDFx86.dll file in Foxit Reader 9.4.1.16828 and earlier, Foxit PhantomPDF 8.3.9.41099 and earlier, and Foxit PhantomPDF 9.4.1.16828 and earlier, on Windows...

schneider Proclima suffers from dll hijacking vulnerability

schneider Proclima is a thermal calculation software. A dll hijacking vulnerability exists in schneider Proclima. An attacker can load a malicious dll and execute malicious code...

CVE-2018-18369

Norton Security Windows client prior to 22.16.3 and SEP SBE Windows client prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution an...

Command Execution Vulnerability in Youku Video PC Client Software

Youku is a video platform under the Big Youku Business Group of Alibaba Culture & Entertainment Group. A command execution vulnerability exists in the Youku Video pc client software, which allows an attacker to inject an executable DLL file into the client process to perform arbitrary functions...

Command Execution Vulnerability in Tencent QQ pc Client Software

QQ, short for Tencent QQ, is an Internet-based instant messaging IM software developed by Tencent. A command execution vulnerability exists in the Tencent QQ pc client software, where the software PC client can allow an attacker to inject executable DLL files into the client process to perform...

Tencent video pc client software suffers from command execution vulnerability

Tencent Video is an online video platform that provides users with a high-definition and smooth video entertainment experience. Tencent Video pc client software has a command execution vulnerability, the software PC client can allow an attacker to inject an executable DLL file into the client...

Command execution vulnerability in wps2019 personal pc client software

WPS Office official website is Kingsoft's office software learning and sharing site, is permanently free of charge to the individual domestic office software. Software PC client can allow attackers to inject executable DLL files in the client process. Execute any function...

Screencom Human LIBCOMMUV2 suffers from dll hijacking vulnerability

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. Pingtong HMI LIBCOMMUV2 suffers from a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

CVE-2019-6553

A vulnerability was found in Rockwell Automation RSLinx Classic versions 4.10.00 and prior. An input validation issue in a .dll file of RSLinx Classic where the data in a Forward Open service request is passed to a fixed size buffer, allowing an attacker to exploit a stack-based buffer overflow...

The installer of Microsoft Teams may insecurely load Dynamic Link Libraries

Overview The installer of Microsoft Teams contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Microsoft states that the root cause of this vulnerability is "Application Directory App Dir DLL planting", thus there is no plan to release a...

The vulnerability of the Visual Studio C++ Redistributable installation program allows a perpetrator to execute arbitrary code.

The vulnerability of the Visual Studio C++ Redistributable software installation program is related to incorrect handling of the search path. Exploiting this vulnerability could allow an attacker to execute arbitrary code using the malicious DLL library...

CVE-2018-18913

Opera before 57.0.3098.106 is vulnerable to a DLL Search Order hijacking attack where an attacker can send a ZIP archive composed of an HTML page along with a malicious DLL to the target. Once the document is opened, it may allow the attacker to take full control of the system from any location...

Microsoft Visual Studio Remote Code Execution Vulnerability (CNVD-2019-07333)

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. A remote code execution vulnerability exists in Microsoft Visual Studio 2017 15.9 that stems from th...

Microsoft Visual Studio RCE Vulnerability (Mar 2019)

This host is missing an important security update according to Microsoft Security Update March-2019. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Go DLL Injection Vulnerability

Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google. An injection vulnerability exists in Google Go 1.12 and earlier versions for Windows platforms, which stems from the program incorrectly using the LoadLibrary function. An attacke...

Kudou Music Box PC client software suffers from a dll file loading vulnerability

Kudou Music Box is a music resource aggregator and player that combines the functions of song and MV search, download, online playback, lyrics synchronization display and so on. A dll file loading vulnerability exists in the Kudou Music Box PC client software, which can be exploited by attackers ...

Lovecraft Video pc client software has dll file loading vulnerability

Aqiyi Video is a client software under Aqiyi that focuses on video playback. The Aiki Video pc client software suffers from a dll file loading vulnerability, which can be exploited by an attacker to execute an arbitrary code DLL file on the target system using malware...