CVE-2010-5220

CVE-2010-5220 affects MEO Encryption Software 2.02. It is an untrusted search path privilege-escalation vulnerability where a trojan dwmapi.dll in the current working directory can be loaded to gain local privileges (via a directory containing a .meo or .cry file). The provided sources describe t...

CVE-2010-5201

CVE-2010-5201 describes an untrusted search path vulnerability in MAGIX Samplitude Producer 11, allowing local privilege escalation when a malicious PlayRIplA6.dll in the current working directory is loaded, demonstrated with a directory that contains a .vip file. The root cause is the use of an ...

CVE-2010-5196

CVE-2010-5196 concerns KeePass Password Safe prior to 2.13, where an untrusted search path allows local privilege escalation via a Trojan horse DwmApi.dll in the current working directory when a .kdbx file is present. The issue is caused by loading a malicious DLL from the CWD, enabling a local u...

CVE-2011-5157

CVE-2011-5157: A local untrusted search path vulnerability in Attachmate Reflection before 14.1 SP1 allows local users to gain privileges by placing a Trojan horse DLL in the current working directory. This is the same family as CVE-2011-0107 and is tied to Attachmate Reflection’s Windows client....

CVE-2010-5216

The CVE-2010-5216 issue affects LINGO 11.0.1.6 and 12.0.2.20, with an untrusted search path vulnerability that lets local users gain privileges via a Trojan horse myuser.dll in the current working directory, demonstrated by a directory containing a .ltf file. Root cause is untrusted search path h...

Discuz X2. 5 the latest version of the proof of the path-vulnerability warning-the black bar safety net

! Vulnerability to prove: http://www.erdare.com/source/plugin/myrepeats/table/tablemyrepeats.php Solution: add! defined'INUC' && exit'Access Denied';...

CVE-2012-2764

Untrusted search path vulnerability in Google Chrome before 20.0.1132.43 on Windows might allow local users to gain privileges via a Trojan horse Metro DLL in the current working directory...

CVE-2012-2753

Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect aka EPC GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint Security VPN R75, Endpoint Connect R73.x, and Remote Access Clients E75.x allows local users to gain privileges via a Trojan...

CVE-2012-2753

Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect aka EPC GUI in Check Point Endpoint Security R73.x and E80.x on the VPN blade platform, Endpoint Security VPN R75, Endpoint Connect R73.x, and Remote Access Clients E75.x allows local users to gain privileges via a Trojan...

CVE-2012-1849

Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .ocsmeet file, aka "Lync Insecure Library Loading...

CVE-2012-1849

CVE-2012-1849 is an Untrusted search path DLL loading vulnerability in Microsoft Lync 2010 and related components (Attendee/Attendant). The root cause is loading of a Trojan horse DLL from the current working directory, demonstrated with a .ocsmeet file, enabling local privilege elevation. Affect...

Design/Logic Flaw

Untrusted search path vulnerability in VMware vMA 4.x and 5.x before 5.0.0.2 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2012-1824

CVE-2012-1824 affects Measuresoft ScadaPro Server and Client prior to version 4.0.0. The vulnerability is an Untrusted Search Path (DLL hijack) that lets a local attacker place a Trojan horse DLL in the current working directory to gain privileges. OpenVAS/Red Hat/NVD entries confirm a code execu...

CVE-2012-1819

CVE-2012-1819 describes an Untrusted Search Path (DLL hijack) vulnerability in WellinTech KingView 6.53. An attacker with file-system access could place a malicious DLL in the application's working directory to achieve arbitrary code execution. ICS-CERT notes the vulnerability is remotely exploit...

CVE-2012-0223

CVE-2012-0223 is a DLL hijacking vulnerability in 7-Technologies TERMIS, affecting TERMIS v2.10 and earlier. An attacker could cause local privilege escalation by placing a malicious DLL in the current working directory (Uncontrolled Search Path Element). A patch has been released by 7T (TERMIS_2...

CVE-2012-0315

CVE-2012-0315 (ALFTP) – Affected software and cause : ESTsoft ALFtp prior to 5.31 is vulnerable to an untrusted search path issue that lets local users gain privileges by loading a Trojan horse executable (e.g., README.exe) when a user opens an extensionless file like README in the same directory...

CVE-2012-0224

CVE-2012-0224 = Untrusted search path vulnerability in 7-Technologies AQUIS 1.5 and earlier allows local privilege escalation via a Trojan horse DLL in the current working directory. Connected docs confirm related TERMIS DLL-hijacking (CVE-2012-0223) and note a vendor patch exists for TERMIS 2.10...

[SECURITY] CVE-2011-4367 Apache MyFaces information disclosure vulnerability

-------------------------------------------------------------------------------------------------- CVE-2011-4367: Apache MyFaces information disclosure vulnerability Severity: Important Vendor: The Apache Software Foundation Versions Affected: MyFaces Core 2.0.1 to 2.0.11 MyFaces Core 2.1.0 to...

CVE-2012-0035

CVE-2012-0035 is an untrusted search path vulnerability in EDE (CEDET) that allows a local user to escalate privileges by crafting a Project.ede file loaded from a project directory. The issue affects CEDET’s EDE in Emacs contexts (notably Emacs 23.x with CEDET before 1.0.1); analysis from Gentoo...

KLA10170 LPE vulnerability in Emacs

An untrusted path vulnerability was found in GNU Emacs. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a specially designed Lisp expression. Original advisories - Exploitation Related products GNU-Emacs CVE list CVE-2012-0035...