CVE-2024-13404

CVE-2024-13404 concerns the WordPress Link Library plugin. Affected: Link Library (WordPress) up to version 7.7.2. Issue: Reflected Cross-Site Scripting via the searchll parameter caused by insufficient input sanitization and output escaping. Impact: unauthenticated attackers could inject web scr...

WordPress Link Library plugin <= 7.7.2 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Colin Xu in WordPress Plugin Link Library versions = 7.7.2...

WordPress plugin Link Library 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

PT-2025-2159 · WordPress · Link Library

Name of the Vulnerable Software and Affected Versions: Link Library plugin for WordPress versions up to, and including, 7.7.2 Description: The issue is related to Reflected Cross-Site Scripting via the searchll parameter due to insufficient input sanitization and output escaping. This allows...

CVE-2024-55540

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 Windows before build 39169...

PT-2026-3639

Name of the Vulnerable Software and Affected Versions NVIDIA Nsight Systems for Windows affected versions not specified Description The application has a flaw in how it loads DLLs, specifically related to insecure DLL search paths. This could allow an attacker to manipulate the search path,...

The vulnerability of the Veritas NetBackup software for backup and data restoration operations, related to an uncontrolled search path element, allows attackers to escalate their privileges and execute arbitrary commands.

The vulnerability of the Veritas NetBackup backup and recovery software relates to an uncontrolled element of the search process. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary commands by loading malicious DLL libraries...

SAP Lifecycle Costing Client 代码问题漏洞

SAP Lifecycle Costing Client is a product lifecycle costing software from SAP, Germany. A code issue vulnerability exists in SAP Lifecycle Costing Client versions prior to 4.7.1, which stems from the presence of a DLL substitution vulnerability that could lead to the theft of sensitive informatio...

APSB24-106 : Security update available for Adobe FrameMaker

Adobe has released a security update for Adobe FrameMaker. This update addresses a critical vulnerability with a single Dynamic Link Library DLL on the Windows platform. Successful exploitation could lead to arbitrary code execution...

CVE-2024-45207

DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. When the agent runs, it searches these directories for necessary DLLs. If an attacker places a malicious DLL in one of these directories, the Veeam Agent might load it inadvertently,...

Mitsubishi Electric GENESIS64和Mitsubishi Electric MC Works64 代码问题漏洞

Mitsubishi Electric MC Works64 and Mitsubishi Electric GENESIS64 are both products of Mitsubishi Electric Corporation Mitsubishi Electric of Japan.Mitsubishi Electric MC Works64 is a data acquisition and monitoring system Mitsubishi Electric GENESIS64 is a SCADA kit. A code issue vulnerability...

CVE-2024-52959

A Improper Control of Generation of Code 'Code Injection' vulnerability in plugin management in iota C.ai Conversational Platform from 1.0.0 through 2.1.3 allows remote authenticated users to perform arbitrary system commands via a DLL file...

Galaxy Software Services iota C.ai Conversational Platform 数据伪造问题漏洞

Galaxy Software Services iota C.ai Conversational Platform is an intelligent AI conversational platform from Galaxy Software Services China. A data forgery vulnerability exists in Galaxy Software Services iota C.ai Conversational Platform versions 1.0.0 through 2.1.3, which stems from an improper...

Galaxy Software Services iota C.ai Conversational Platform 代码注入漏洞

Galaxy Software Services iota C.ai Conversational Platform is an intelligent AI conversational platform from Galaxy Software Services China. A code injection vulnerability exists in Galaxy Software Services iota C.ai Conversational Platform versions 1.0.0 through 2.1.3, which stems from a code...

The vulnerability of Siemens Solid Edge’s design and simulation tools lies in its uncontrolled search path, which allows a hacker to execute arbitrary code.

The vulnerability of Siemens Solid Edge’s design and simulation tools is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a attacker to execute arbitrary code by placing the created DLL file within the system...

Panda Security Dome 代码问题漏洞

Panda Security Dome is an antivirus product for ransomware and spyware from Spanish company Panda Security. A code issue vulnerability exists in Panda Security Dome, which arises from an improper restriction of the DLL search path by the VPN process, which could lead to a local attacker loading a...

Clementine 安全漏洞

Clementine is a multi-platform music player from the Clementine open source. A security vulnerability exists in Clementine v1.3.1, which originated from a vulnerability that allows local attackers to execute arbitrary code via a crafted DLL file...

PT-2024-8715 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge SE2024 versions prior to V224.0 Update 9 Description: A DLL hijacking issue has been identified, which could allow an attacker to execute arbitrary code by placing a crafted DLL file on the system. The vulnerability is related to a...

Autodesk AutoCAD 安全漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from the US company Autodesk. A security vulnerability exists in Autodesk AutoCAD that stems from an out-of-bounds read vulnerability that can be triggered when parsing a maliciously crafted SLDPRT file in odxswdll.dll, which can be...

Autodesk AutoCAD 安全漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk AutoCAD that originates from a maliciously constructed STP file that may cause memory corruption when parsed in ASMDATAX230A.dll, which can be...