1423 matches found
CVE-2022-1018
The CVE-2022-1018 issue is an XML External Entity (XXE) vulnerability in Rockwell Automation ISaGRAF ecosystem. When opening a malicious solution file, an unsafe DLL call may allow local file data to be sent to a remote web server, causing confidentiality loss. Affected products include Connected...
CVE-2022-22996
The G-RAID 4/8 Software Utility setups for Windows were affected by a DLL hijacking vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the system user...
CVE-2022-26511
WPS Presentation 11.8.0.5745 insecurely load d3dx941.dll when opening .pps files'current directory type' DLL loading...
Yokogawa Exaopc 代码问题漏洞
Yokogawa Electric is a server of Yokogawa Electric Yokogawa, a Japanese company. A security vulnerability exists in Yokogawa Electric. The vulnerability stems from an unsafe DLL loading issue. The following products and versions are affected: CENTUM CS 3000 versions R3.08.10 through R3.09.00,...
WordPress Link Library plugin arbitrary link deletion vulnerability
WordPress plugin is a WordPress application plugin. WordPress Link Library plugin versions prior to 7.2.8 have an arbitrary link removal vulnerability, which stems from unauthorized removal of links, and can be exploited by attackers to remove arbitrary links via carefully crafted requests...
CVE-2022-26319
An installer search patch element vulnerability in Trend Micro Portable Security 3.0 Pro, 3.0 and 2.0 could allow a local attacker to place an arbitrarily generated DLL file in an installer folder to elevate local privileges. Please note: an attacker must first obtain the ability to execute...
CVE-2021-4198
A NULL Pointer Dereference vulnerability in the messagingipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools, VPN Standalone allows an attacker to arbitrarily crash product processes and generate crashdump files. This issue affects:...
CVE-2022-23202
Adobe Creative Cloud Desktop version 2.7.0.13 and earlier is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must download a...
ZOHO ManageEngine Applications Manager 代码问题漏洞
ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product features application performance management, fault management, report generation, and SLA management. A code issue vulnerability exists in Zo...
CVE-2022-24955
Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for DLL files...
CVE-2022-24955
Foxit PDF Reader before 11.2.1 and Foxit PDF Editor before 11.2.1 have an Uncontrolled Search Path Element for DLL files...
Foxit PDF Reader和Foxit PDF Editor 代码问题漏洞
Foxit PDF Reader and Foxit PDF Editor are both products of Foxit China, a PDF reader, and Foxit PDF Editor, a PDF editor. A security vulnerability exists in Foxit PDF Reader and Foxit PDF Editor, which stems from the fact that the products do not effectively handle the search path of DLL files. N...
WordPress Link Library plugin cross-site scripting vulnerability
WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. A cross-site scripting vulnerability exists in versions of the WordPress Link Library plugin prior to 7.2.9, which stems from the plugin's failure to clean and escape settingscopy parameters befo...
WordPress Link Library plugin cross-site request forgery vulnerability
WordPress is a set of blogging platforms developed by the WordPress Foundation using the PHP language. WordPress Link Library plugin in versions prior to 7.2.8 is vulnerable to cross-site request forgery, which stems from a WEB application that does not adequately verify that requests are coming...
Adobe Creative Cloud Desktop Application 代码问题漏洞
Adobe Creative Cloud Desktop Application is a suite of applications from Adobe for managing applications and services in the Creative Cloud Member Management Center. The application supports synchronizing and sharing files, managing fonts, and accessing a library of assets for commercial...
AMD Radeon 代码问题漏洞
Amd Radeon is a package of device drivers and utilities for Advanced Micro Devices graphics cards and gpu's from Amd USA. A security vulnerability exists in AMD Radeon Software that stems from the possibility that AMD Radeon Software could be hijacked by a DLL via a path variable. An unprivileged...
CVE-2021-25092
The Link Library WordPress plugin before 7.2.8 does not have CSRF check when resetting library settings, allowing attackers to make a logged in admin reset arbitrary settings via a CSRF attack...
CVE-2021-25092
The Link Library WordPress plugin before 7.2.8 does not have CSRF check when resetting library settings, allowing attackers to make a logged in admin reset arbitrary settings via a CSRF attack...