Huawei UTPS Untrusted Search Path Vulnerability

Huawei UTPS is an application software from Huawei China that runs on a PC to manage data cards. An untrusted search path vulnerability exists in previous versions of Huawei UTPS UTPS-V200R003B015D15SP00C983, which can be exploited by a local attacker with the help of a Trojan horse DLL file to...

Microsoft Internet Explorer DLL Loading Remote Code Execution Vulnerability

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A remote code execution vulnerability exists in Microsoft IE version 11, which originates from a program that fails to properly...

Microsoft Office Compatibility Pack Remote Code Execution Vulnerabilities (3148775)

This host is missing a critical security update according to Microsoft Bulletin MS16-042. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Excel Viewer Remote Code Execution Vulnerabilities (3148775)

This host is missing an important security update according to Microsoft Bulletin MS16-042. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

ABB Panel Builder 800 DLL Handling Vulnerability

ABB Panel Builder 800 is a Web-based HMI Human Machine Interface system. ABB Panel Builder fails to properly handle DLL files, allowing an attacker to inject and execute arbitrary code using a DLL with an unspecified absolute path...

Wireshark 1.12.x < 1.12.10 Multiple Vulnerabilities (Mac OS X)

The version of Wireshark installed on the remote Mac OS X host is 1.12.x prior to 1.12.10. It is, therefore, affected by multiple vulnerabilities in the following components, which can result in a memory disclosure or a denial of service : - ASN.1 BER dissector - DNP dissector - GSM A-bis OML...

Microsoft Windows DLL Load Denial of Service Vulnerability

Microsoft Windows is a family of operating systems released by Microsoft Corporation in the U.S. Sync Framework is one of the synchronization platform components used to enable collaboration and offline access to applications, services, and devices. A denial of service vulnerability exists in Syn...

Microsoft DLL Load Remote Code Execution Vulnerability

Microsoft Windows and Internet Explorer IE are both products of Microsoft Corporation, U.S.A. Windows is a family of operating systems.IE is a Web browser that is the default browser that comes with Windows operating systems. A remote code execution vulnerability exists in Microsoft Windows and I...

CVE-2016-0042

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "Windows DLL Loading Remote...

CVE-2016-0041

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 10 and 11 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka...

TrueCrypt and VeraCrypt DLL File Loading Arbitrary Code Execution Vulnerability

TrueCrypt and VeraCrypt are both free, open source disk encryption software. TrueCrypt and VeraCrypt load DLLs contain security vulnerabilities that allow attackers to exploit the vulnerabilities to build malicious files that can be parsed by the user and can execute arbitrary code...

Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2016-00254)

Microsoft Windows is a popular operating system. Microsoft Windows fails to properly load DLL files, allowing attackers to exploit the vulnerability to build special files that can be tricked into being parsed by users to elevate privileges...

Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2016-00256)

Microsoft Windows is a popular operating system. Microsoft Windows fails to properly load DLL files, allowing attackers to exploit the vulnerability to build special files that can be tricked into being parsed by users to elevate privileges...

CVE-2016-0014

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL...

Microsoft Windows DLL Load Privilege Elevation Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows. Due to the program failing to properly validate input before loading a dynamic link library DLL file. A local attacker could exploit...

Microsoft Windows Excel Viewer Remote Code Execution Vulnerability (3124585)

This host is missing a critical security update according to Microsoft Bulletin MS16-004. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Hacking Team Android browser attacks during the vulnerability analysis Stage4-vulnerability warning-the black bar safety net

A, vulnerability introduction: Hacking team of the year broke out for android4. 0. x-4.3. x android browser vulnerabilities to attack the use of the code. The exploit code, by successive use of a plurality of browser and kernel vulnerabilities, is done through Javascript to the virtual memory wri...

Microsoft Windows Excel Viewer Remote Code Execution Vulnerability (3104540)

This host is missing an important security update according to Microsoft Bulletin MS15-116. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Siemens APOGEE Insight Database Conversion Tool DLL Hijacking Vulnerability

Insight is the monitoring and configuration software used in the Siemens building automation system APOGEE. A DLL hijacking vulnerability exists in the Siemens APOGEE Insight Database Conversion Tool. Because Insight's Database Conversion component, the Convert.exe program, does not securely load...

Microsoft Office Compatibility Pack Remote Code Execution Vulnerabilities (3096440)

This host is missing an important security update according to Microsoft Bulletin MS15-110. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...