Adobe Prelude suffers from a dll hijacking vulnerability

Adobe Prelude is a video post-processing software. Adobe Prelude has a dll hijacking vulnerability when processing plproj project files, which can be exploited by attackers to load a malicious dll and execute malicious code...

curl: Windows Privilege Escalation: Malicious OpenSSL Engine

Summary: The curl windows binaries are built with OpenSSL libraries and have an insecure path for the OPENSSLDIR build parameter. This path is set to c:\usr\local\ssl. When curl is executed it attempts to load openssl.cnf from this path. By default on windows, low privileged users have the...

CVE-2019-6724

The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a privileged process and can allow an unprivileged local attacker to load a malicious library, resulting in arbitrary code executing as root...

CVE-2019-6724

The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a privileged process and can allow an unprivileged local attacker to load a malicious library, resulting in arbitrary code executing as root...

Design/Logic Flaw

The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a privileged process and can allow an unprivileged local attacker to load a malicious library, resulting in arbitrary code executing as root...

CVE-2019-6724

CVE-2019-6724 concerns the Barracuda VPN Client. The vulnerable component is the barracudavpn component in version prior to 5.0.2.7 for Linux, macOS, and OpenBSD, which runs as a privileged process and can allow an unprivileged local attacker to load a malicious library, resulting in arbitrary co...

CVE-2019-6724: Untrusted Search Path

The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a privileged process and can allow an unprivileged local attacker to load a malicious library, resulting in arbitrary code executing as root...

IBM DB2 Elevation of Privilege Vulnerability (CNVD-2019-07257)

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in IBM DB2 including DB2 Connect Server based on Linux, UNIX and Windo...

Microsoft Visual Studio Remote Code Execution Vulnerability (CNVD-2019-07333)

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. A remote code execution vulnerability exists in Microsoft Visual Studio 2017 15.9 that stems from th...

Symantec Norton Utilities DLL Preloading Vulnerability

Symantec Norton Utilities is a computer optimization tool from Symantec, which can be used to clean up the cache and other files in your computer and optimize the speed of your computer. A DLL preloading vulnerability exists in versions prior to Symantec Norton Utilities 16.0.3.44. An attacker ca...

CVE-2018-5235

Norton Utilities prior to 16.0.3.44 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, it will...

CVE-2018-1487

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5 and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege users full access to the DB2 instance account by loading a malicious shared library. IBM X-Force ID: 140972...

Design/Logic Flaw

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5 and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege users full access to the DB2 instance account by loading a malicious shared library. IBM X-Force ID: 140972...

Microsoft Visual Studio Community installer untrustworthy search path vulnerability

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete set of development tools that includes most of the tools needed throughout the software lifecycle.Visual Studio Community is the community edition of Visual Studio.The installer is the Visual...

Microsoft Windows Iexpress Untrustworthy Search Path Vulnerability

Microsoft Windows Iexpress is a tool for compressing CAB files bundled with Windows from Microsoft USA. An untrusted search path vulnerability exists in the self-extracting archive file created in Microsoft Windows Iexpress. The vulnerability can be exploited by an attacker with a malicious DLL i...

CVE-2017-16046

mariadb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

CVE-2018-10027

ESTsoft ALZip before 10.76 allows local users to execute arbitrary code via creating a malicious .DLL file and installing it in a specific directory: %PROGRAMFILES%\ESTsoft\ALZip\Formats, %PROGRAMFILES%\ESTsoft\ALZip\Coders, %PROGRAMFILESX86%\ESTsoft\ALZip\Formats, or...

CELSYS CLIP STUDIO PAINT, CLIP STUDIO ACTION and CLIP STUDIO MODELER DLL Search Path Vulnerabilities

CELSYS CLIP STUDIO PAINT, CLIP STUDIO ACTION and CLIP STUDIO MODELER are all products of CELSYS Japan.CELSYS CLIP STUDIO PAINT is a set of tools for making comics and illustrations.CLIP STUDIO ACTION is a set of software for 3D animation. CLIP STUDIO MODELER is a 3D modeling plug-in. A security...

The installer of PhishWall Client Firefox and Chrome edition for Windows untrusted search path vulnerability

The installer of PhishWall Client Firefox and Chrome edition for Windows is a suite of anti-phishing and anti-MITB software for Windows-based platforms. The installer of PhishWall Client Firefox and Chrome edition for Windows suffers from an untrusted search path vulnerability. The vulnerability...

CVE-2018-5349

A vulnerability has been found in Heimdal PRO v2.2.190, but it is most likely also present in Heimdal FREE and Heimdal CORP. Faulty permissions on the directory "C:\ProgramData\Heimdal Security\Heimdal Agent" allow BUILTIN\Users to write new files to the directory. On startup, the process...