1423 matches found
Rockwell Automation RSLinx Classic Buffer Overflow Vulnerability
Rockwell Automation RSLinx Classic is a factory communications solution from Rockwell Automation. The solution supports access to RockwellSoftware, Allen-Bradley applications, etc. via Allen-Bradley programmable controllers. A stack buffer overflow vulnerability exists in the .dll file in Rockwel...
Microsoft Teams Dynamic Link Library Unsafe Loading Vulnerability
Microsoft Teams is a unified communications platform that combines continuous workplace chat, video conferencing, file storage and application integration. An unsafe loading of dynamic link libraries vulnerability exists in the Microsoft Teams installer. An attacker could exploit the vulnerabilit...
Microsoft Windows 7 Dynamic Link Library Unsafe Loading Vulnerability
Windows 7 is an operating system developed by Microsoft with the kernel version number Windows NT 6.1. Microsoft Windows 7 suffers from an insecure loading of dynamic link libraries vulnerability. An attacker can exploit this vulnerability to execute arbitrary code via specially crafted DLL files...
NVIDIA GeForce Experience Vulnerabilities - Lenovo Support US
No description provided...
The Fileless, Non-Malware Menace
There’s an old expression: if it looks like a duck, walks like a duck, and quacks like a duck, then it must be a duck. What happens, though, if the duck in question is malware that doesn’t behave like typical malware? Namely, it doesn’t drop a file on your disk to infect your computer, hijack...
CVE-2018-15983
Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have an insecure library loading dll hijacking vulnerability. Successful exploitation could lead to privilege escalation...
The vulnerability of the pcwin.dll library in temperature control software, related to a data type mismatch error, allows a hacker to execute code remotely.
The vulnerability of the pcwin.dll library in the GUI temperature control software is related to a data type mismatch error. Exploiting this vulnerability could allow an attacker to execute arbitrary code during the syntactic analysis of the GD1 file...
CVE-2018-6668
A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through interpreters such as PowerShell...
CVE-2018-5202
SKCertService 2.5.5 and earlier contains a vulnerability that could allow remote attacker to execute arbitrary code. This vulnerability exists due to the way .dll files are loaded by SKCertService. It allows an attacker to load a .dll of the attacker's choosing that could execute arbitrary code...
The vulnerability of the DLL component of Cisco AMP’s security tools for end devices allows a malicious actor to disable the security services and system scanning functions.
The vulnerability of the DLL component used by Cisco AMP’s security tools for end devices relates to resource management errors. Exploiting this vulnerability allows a malicious actor to remotely disable security services and system scanning services using a specially crafted DLL file...
Adobe Flash Player Insecure Library Loading (DLL Hijacking) Vulnerability
Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A security vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to elevate...
CVE-2018-6263
NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows in which an attacker who has access to a local user account can plant a malicious dynamic link library DLL during application installation, which may lead to escalation of privileges...
WeChat pc client software suffers from arbitrary code execution vulnerability
WeChat is a free application launched by Tencent to provide instant messaging services for smart terminals. The WeChat pc client software suffers from an arbitrary code execution vulnerability, which can be exploited by an attacker with the help of malware to execute arbitrary code DLL files on t...
Schneider Electric Software Update DLL Hijacking Vulnerability
Schneider Electric Software Update SESU is a Schneider software update tool from Schneider Electric, France. Schneider Electric Software Update suffers from a DLL hijacking vulnerability that can be exploited by an attacker to execute arbitrary code by placing a specially crafted DLL file on the...
CVE-2018-14812
An uncontrolled search path element DLL Hijacking vulnerability has been identified in Fuji Electric Energy Savings Estimator versions V.1.0.2.0 and prior. Exploitation of this vulnerability could give an attacker access to the system with the same level of privilege as the application that...
Advantech WebAccess Arbitrary File Deletion Vulnerability
Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. The .dll is one of the dynamic link library components. A...
September 2018 Preview of the Quality Rollups for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows Server 2012 (KB 4458612)
September 2018 Preview of the Quality Rollups for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows Server 2012 KB 4458612 This also applies to: Microsoft .NET Framework 3.5 Notice This update is included in the Security and Quality Rollup that's dated October 9, 201...
CVE-2018-11072
Dell Digital Delivery versions prior to 3.5.1 contain a DLL Injection Vulnerability. A local authenticated malicious user with advance knowledge of the application workflow could potentially load and execute a malicious DLL with administrator privileges...
Intel Data Center Migration Center Software software installer DLL injection vulnerability
Intel Data Center Migration Center Software is a set of data center migration software from Intel Corporation in the U.S. The software installer is its installer. A DLL injection vulnerability exists in the software installer in Intel Data Center Migration Center Software 3.1 and earlier versions...