8989 matches found
Design/Logic Flaw
Untrusted search path vulnerability in Self-extracting archive files created by 7-ZIP32.DLL 9.22.00.01 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory...
Design/Logic Flaw
Untrusted search path vulnerability in PrimeDrive Desktop Application 1.4.3 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2130
CVE-2017-2130 affects PhishWall Client Internet Explorer (versions up to 3.7.13). The issue is an untrusted search path in the installer that can allow a Trojan‑horse DLL to be loaded from an unspecified directory, enabling privilege escalation to the user’s privileges. Impact described as arbitr...
CVE-2017-2156
Untrusted search path vulnerability in Vivaldi installer for Windows prior to version 1.7.735.48 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory...
CVE-2017-2108
Untrusted search path vulnerability in PrimeDrive Desktop Application 1.4.3 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2154
CVE-2017-2154 concerns an untrusted DLL search path in multiple JustSystems/Hanako-and-related products (Hanako 2015–2017, Hanako Pro 3, JUST Office 3 variants, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, and related packages). The underlying issue is insecure lo...
CVE-2017-2107
CVE-2017-2107 concerns Self-extracting archives created by the 7-ZIP32.DLL library (versions 9.22.00.01 and earlier). The root cause is an insecure DLL search path (CWE-427) in the self-extracting archive loading process, allowing an attacker to execute arbitrary code with user privileges if a Tr...
CVE-2017-2154
Untrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 Standard, JUST Office 3 Eco Print Package, JUST Office 3 & Tri-De DataProtect Package, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, Hanako Police 5, JUST Poli...
CVE-2017-2108
CVE-2017-2108 affects PrimeDrive Desktop Application (1.4.3 and earlier). The vulnerability is an untrusted search path/DLL hijacking in the installer, allowing arbitrary code execution with the privileges of the user during installation via a Trojan horse DLL located in an unspecified directory ...
CVE-2017-2130
Untrusted search path vulnerability in the installer of PhishWall Client Internet Explorer version Ver. 3.7.13 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2107
Untrusted search path vulnerability in Self-extracting archive files created by 7-ZIP32.DLL 9.22.00.01 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory...
BLF-Tech LLC VisualView HMI
CVSS v3 7.0 ATTENTION: Low skill level to exploit Vendor: BLF-Tech LLC Equipment: VisualView HMI Vulnerability: Uncontrolled Search Path Element AFFECTED PRODUCTS The following VisualView HMI versions are affected: VisualView HMI Version 9.9.14.0 and prior. IMPACT Successful exploitation of this...
CVE-2016-4846
Untrusted search path vulnerability in the installer of PhishWall Client Internet Explorer before 3.7.8.2...
CVE-2016-4846
Untrusted search path vulnerability in the installer of PhishWall Client Internet Explorer before 3.7.8.2...
Adobe Reader < 11.0.20 / 2015.006.30306 / 2017.009.20044 Multiple Vulnerabilities (APSB17-11) (macOS)
The version of Adobe Reader installed on the remote macOS or Mac OS X host is a version prior to 11.0.20, 2015.006.30306, 2017.009.20044. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exists that allow an attacker to execute arbitrary code. CVE-2017-301...
Adobe Reader < 2015.006.30306 / 2017.009.20044 Multiple Vulnerabilities (APSB17-11)
The version of Adobe Reader installed on the remote Windows host is a version prior to 2015.006.30306 or 2017.009.20044. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an...
Adobe Photoshop CC 17.x < 17.0.2 / 18.x < 18.1 Multiple Vulnerabilities (APSB17-12)
The version of Adobe Photoshop CC installed on the remote Windows host is 17.x prior to 17.0.2 2015.5.2 or 18.x prior to 18.1 2017.1.0. It is, therefore, affected by multiple vulnerabilities : - A memory corruption issue exists due to improper handling of PCX files. An unauthenticated, remote...
Microsoft Office DLL Loading Remote Code Execution Vulnerability
Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A DLL loading remote code execution vulnerability exists in Microsoft Office OneNote 2007 version. An...