CVE-2014-9227

Multiple untrusted search path vulnerabilities in the Manager component in Symantec Endpoint Protection SEP before 12.1.6 allow local users to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2014-9227

Multiple untrusted search path vulnerabilities in the Manager component in Symantec Endpoint Protection SEP before 12.1.6 allow local users to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2014-9227

CVE-2014-9227 affects Symantec Endpoint Protection Manager (SEPM) prior to 12.1 RU6. The vulnerability is a DLL loading/pre-loading weakness that allows a local attacker to gain elevated privileges by placing a malicious DLL in a directory or on a network share and enticing the user to load it. O...

Dell SonicWall NetExtender Privilege Escalation Vulnerability - Windows

Dell SonicWall NetExtender is prone to a privilege escalation vulnerability. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Amazon Linux: Security Advisory (ALAS-2015-484)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dell SonicWall NetExtender with firmware unquoted Windows search path vulnerability

Dell SonicWall NetExtender is the remote vpn client in the Secure Mobile Access solution from Dell USA. An unquoted Windows search path vulnerability exists in Dell SonicWall NetExtender with firmware versions prior to 7.5.1.2, and versions 8.x prior to 8.0.0.3, which allows a local user to gain...

CVE-2015-4173

Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE%...

Design/Logic Flaw

Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE%...

CVE-2015-4173

Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE%...

CVE-2015-4173

Dell SonicWall NetExtender is affected by CVE-2015-4173, a local privilege-escalation due to an unquoted Windows search path in the autorun value. Affected as: NetExtender before 7.5.227 and 8.0.x before 8.0.238, used with SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv. Root cause: ...

CVE-2015-2473

Untrusted search path vulnerability in the client in Remote Desktop Protocol RDP through 8.1 in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp...

Remote code execution

Untrusted search path vulnerability in the client in Remote Desktop Protocol RDP through 8.1 in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp...

CVE-2015-2473

Untrusted search path vulnerability in the client in Remote Desktop Protocol RDP through 8.1 in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .rdp...

CVE-2015-2473

CVE-2015-2473 is an RDP DLL loading remote code execution vulnerability in Windows clients prior to patch MS15-082. The issue arises from untrusted DLL search path: a Trojan horse DLL placed in the user’s current working directory can be loaded when a user opens a crafted RDP file, allowing code ...

Symantec Endpoint Protection Manager Multiple Vulnerabilities (Aug 2015)

Symantec Endpoint Protection Manager is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Design/Logic Flaw

Untrusted search path vulnerability in Schneider Electric Wonderware System Platform before 2014 R2 Patch 01 allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2015-3940

Untrusted search path vulnerability in Schneider Electric Wonderware System Platform before 2014 R2 Patch 01 allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2015-1492

Untrusted search path vulnerability in the client in Symantec Endpoint Protection 12.1 before 12.1-RU6-MP1 allows local users to gain privileges via a Trojan horse DLL in a client install package...

CVE-2015-1492

Symantec Endpoint Protection Manager (SEPM) is affected by CVE-2015-1492: an untrusted search path/Trojan horse DLL vulnerability in the SEP client install package allows local privilege escalation when SEPM is version before 12.1 RU6 MP3. The issue is discussed in multiple sources (e.g., SYM15-0...

SAP Enterprise Central Component Privilege Vulnerability

SAP is short for "System Applications and Products", which is the software name of SAP's product, Enterprise Management Solutions. An untrustworthy search path vulnerability exists in SAP ECC, which can be exploited by a local attacker to gain privileges via a Trojan horse...