Microsoft Edge Elevation of Privilege Vulnerability (CNVD-2020-61588)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge based on Chromium, which stems from the program failing to prompt a warning message to the user when downloading a DLL file. The...

Denial of Service Vulnerability in VisualField VF***.dll Component at Zhejiang ZDAC Information Technology Co.

VisualField VF for short is a software package for control system configuration and monitoring for the ECS-700 system. A denial of service vulnerability exists in the VisualField VF.dll component of Zhejiang ZDZC Information Technology Co. An attacker can exploit this vulnerability to cause the...

Shenzhen Xunlei Network Technology Co., Ltd Xunlei X suffers from dll hijacking vulnerability (CNVD-2020-49286)

Founded in 2003, Shenzhen Xunlei Network Technology Co., Ltd. is a shared computing and blockchain technology innovation enterprise. Shenzhen Xunlei Network Technology Co., Ltd Xunlei X suffers from a dll hijacking vulnerability, which can be exploited by an attacker to load a malicious dll and...

Shenzhen Xunlei Network Technology Co., Ltd Xunlei Video has dll hijacking vulnerability

Founded in 2003, Shenzhen Xunlei Network Technology Co., Ltd. is a shared computing and blockchain technology innovation enterprise. Shenzhen Xunlei Network Technology Co., Ltd Xunlei Video has a dll hijacking vulnerability, which can be exploited by an attacker to load a malicious dll and execut...

Eaton 9000XDrive has a dll hijacking vulnerability

Eaton is a power management company and 9000XDrive is an inverter commissioning software. Eaton 9000XDrive suffers from a dll hijacking vulnerability that can be exploited by an attacker to load a malicious dll to execute malicious code...

Shenzhen Xunlei Network Technology Co., Ltd Xunlei Quickbird has dll hijacking vulnerability

Founded in 2003, Shenzhen Xunlei Network Technology Co., Ltd. is a shared computing and blockchain technology innovation enterprise. Shenzhen Xunlei Network Technology Co., Ltd Xunlei Quickbird suffers from a dll hijacking vulnerability, which can be exploited by an attacker to load a malicious d...

Shenzhen Xunlei Network Technology Co., Ltd Xunlei X has dll hijacking vulnerability

Founded in 2003, Shenzhen Xunlei Network Technology Co., Ltd. is a shared computing and blockchain technology innovation enterprise. Shenzhen Xunlei Network Technology Co., Ltd Xunlei X suffers from a dll hijacking vulnerability, which can be exploited by an attacker to load a malicious dll and...

CVE-2020-15722

In version 12.1.0.1004 and below of 360 Total Security,when TPI calls the browser process, there exists a local privilege escalation vulnerability. An attacker who could exploit DLL hijacking could execute arbitrary code on the Local system...

Adobe ColdFusion DLL Search Order Hijacking Vulnerability (CNVD-2020-44849)

Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has a security vulnerability. An attacker could exploit the vulnerability to elevate...

Remote code execution

A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library DLL files, aka 'Microsoft Office Remote Code Execution Vulnerability'...

Python code issue vulnerability (CNVD-2020-53314)

Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A code issue vulnerability exists in Python Windows that stems from python3X.dll using an invalid search...

Mozilla Firefox Code Problem Vulnerability (CNVD-2020-46339)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in previous versions of Mozilla Firefox 78 for Windows-based platforms. The vulnerability can be exploited by an attacker to execute arbitrary code via a malicious DLL...

Raonwiz CyMiInstaller322 ActiveX Code Issue Vulnerability

Raonwiz CyMiInstaller322 ActiveX is a version control program from the Korean company Raonwiz. A security vulnerability exists in File Download in Raonwiz CyMiInstaller322 ActiveX 2016.5.26.1 and earlier versions, which stems from the program failing to adequately perform an authentication...

Cloud Orange PDF Editor DLL Hijacking Vulnerability

Cloud Orange PDF Editor is a simple and easy to use PDF editing tool of Xunwu Cloud Orange Information Technology Co. Cloud Orange PDF Editor has a DLL hijacking vulnerability, which can be exploited by attackers to execute arbitrary code...

Unspecified Vulnerability in Foxit Studio

Foxit Studio Photo is a set of image editing software from the Chinese company Foxit Foxit. A security vulnerability exists in Foxit Studio Photo versions prior to 3.6.6.922. The vulnerability can be exploited by a local attacker to gain privileges via a specially crafted DLL file in the current...

Foxit PhantomPDF code issue vulnerability (CNVD-2020-32465)

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A code issue vulnerability exists in Foxit PhantomPDF versions prior to 8.3.6. A remote attacker can exploit this vulnerability to execute code via a DLL...

CVE-2018-21241

An issue was discovered in Foxit PhantomPDF before 8.3.6. It has an untrusted search path that allows a DLL to execute remote code...

CVE-2020-13812

An issue was discovered in Foxit Studio Photo before 3.6.6.922. It allows local users to gain privileges via a crafted DLL in the current working directory...

Raonwiz K Upload Parameter Injection Vulnerability

Raonwiz K Upload is a file transfer component from the Korean company Raonwiz. A security vulnerability exists in RAONWIZ K Upload 2018.0.2.51 and earlier versions. An attacker can use the vulnerability to modify parameters, download arbitrary DLL files and perform injection operations...

CVE-2020-7808

In RAONWIZ K Upload v2018.0.2.51 and prior, automatic update processing without integrity check on update moduleweb.js allows an attacker to modify arguments which causes downloading a random DLL and injection on it...