Cisco AnyConnect Secure Mobility Client Search Path Handling Vulnerability

The Cisco AnyConnect Secure Mobility Client is a set of next-generation VPN clients. The client enables remote users to securely connect to Cisco ASA 5500 devices over SSL VPN. The 'CMainThread::launchDownloader' function in the vpndownloader.exe file of the Cisco AnyConnect Secure Mobility Clien...

Microsoft RDP DLL Loading Remote Code Execution Vulnerability

Microsoft Remote Desktop Protocol RDP, Remote Desktop Protocol is an American Microsoft Microsoft company based on the Windows system in the multi-channel multi-channel protocol, it can be remotely connected to and control the server or computer. A remote code execution vulnerability exists in...

Microsoft Windows Untrusted Search Path Vulnerability

Microsoft Windows is a series of operating systems designed for personal computer and server users from the American company Microsoft. An untrustworthy search path vulnerability exists in Microsoft Windows. Allows local users to gain privileges via a Trojan horse DLL in the current working...

Microsoft Excel Untrusted Search Path Vulnerability

Microsoft Excel is one of the components of Microsoft office, the office software of Microsoft Corporation Microsoft. An untrusted search path vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel Viewer 2007 SP3,Office Compatibility Pack SP3 allows local users to gain privileges via a...

Microsoft Office Compatibility Pack Multiple Vulnerabilities (3072620)

This host is missing an important security update according to Microsoft Bulletin MS15-070. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Excel DLL Remote Code Execution (MS15-070; CVE-2015-2378)

A remote code execution vulnerability exists in Microsoft Excel. The vulnerability is due to the way that Microsoft Excel improperly handles the loading of dynamic link library DLL files. An attacker could trigger this flaw by convincing a victim to load a malicious DLL file...

MS15-069: Description of the security update for Windows: July 14, 2015

None None...

Microsoft Windows Kernel DLL Path Error Elevation of Privilege Vulnerability

Microsoft Windows is a popular operating system. A security vulnerability in the Microsoft windows kernel allows a local attacker to place a specially crafted dll file in a system directory or on a network share, which can be loaded by the target user to execute arbitrary code...

Schneider Electric OPC Factory Server DLL Load Arbitrary Code Execution Vulnerability

Schneider Electric OPC Factory Server OFS is a set of data communication editing software. The software supports access to important information, open page design, transparent architecture and interoperability to enable good processes and communication. A security vulnerability exists in the...

WordPress Link Library Plugin <= 5.0.8 - SQL Injection

This plugin is prone to SQL injection in wp-content/plugins/link-library/tracker.php id parameter. Solution Update the plugin...

WordPress Link Library Plugin <= 5.1.6 - SQL Injection

Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Update the plugin...

WordPress Link Library Plugin <= 5.0.8 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Vulnerable parameter "id". Solution Update the plugin...

Ecava IntegraXor DLL Vulnerability

IntegraXor is the human-machine interface for creating and running Web-based SCADA systems. IntegraXor SCADA Server versions prior to 4.2.4488 have a security vulnerability in the handling of renamed malicious DLLs, which could allow an attacker to execute malicious code in an affected applicatio...

Adobe LiveCycle ES DLL Loading Arbitrary Code Execution Vulnerability

Adobe LiveCycle ES Enterprise Suite is the United States of America Odo than Adobe the company's set of enterprise and government applications developed by the building platform. The platform is mainly used to build automated business process applications, and the integration of many Adobe tools,...

Bentley Microstation Arbitrary Code Execution Vulnerability

Bentley Systems Microstation is a suite of 2D and 3D CAD information modeling software from Bentley Systems, USA. The software provides drawing and modeling tools, rendering effects and animations, engineering drawings and drawing documentation. An arbitrary code execution vulnerability exists in...

Telerik Analytics Monitor Library Search Path Vulnerability

Telerik Analytics Monitor Library is a library for third-party application analytics services to collect information about applications. A search path vulnerability in Telerik Analytics Monitor Library allows local attackers to exploit the vulnerability to execute in the context of an application...

Elipse E3 Process Control Vulnerability

Elipse E3 is the monitoring control and data acquisition system. A process control vulnerability in the Elipse E3 application caused by a third-party DLL can be successfully exploited to cause arbitrary code execution...

PT-2015-4468 · Microsoft · Windows 8 +8

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Server 2003 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT Gold a...

iPass Open Mobile Windows Client Remote Code Execution Vulnerability

iPass Open Mobile is a quick and easy way for you to use your device to connect to over a million enabled WIFIs around the world. A security vulnerability exists in the iPass Open Mobile client that allows attackers to register arbitrary DLLs via UNC shared pathnames by sending specially crafted...

Macroplant iExplorer Untrustworthy Search Path Vulnerability

Macroplant iExplorer is an explorer for viewing files for the iOS platform from Macroplant USA. Macroplant iExplorer suffers from an untrusted search path vulnerability. A local attacker can exploit this vulnerability by executing arbitrary code via the Trojan horse itunesmobiledevice.dll file to...