CWE:

Sorry. No results for Bugtraq WLB2

---

CVEMAP Search Results

CVE

Details

Description

2018-04-19

Medium

CVE-2018-6306

Updating...

Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager versions before 8.0.6.538.

2018-04-16

High	CVE-2018-0562	Vendor: Coderium Software: Soundengine	Untrusted search path vulnerability in Installer of SoundEngine Free ver.5.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
High	CVE-2018-0561	Vendor: Securebrain Software: Phishwall	Untrusted search path vulnerability in The installer of PhishWall Client Internet Explorer edition Ver. 3.7.15 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

2018-04-02

Medium

CVE-2018-6661

Vendor: Mcafee Software: True key

DLL Side-Loading vulnerability in Microsoft Windows Client in McAfee True Key before 4.20.110 allows local users to gain privilege elevation via not verifying a particular DLL file signature.

2018-03-26

Medium

CVE-2018-5470

Vendor: Philips Software: Intellispace...

Philips IntelliSpace Portal all versions of 8.0.x, and 7.0.x have an unquoted search path or element vulnerability that has been identified, which may allow an authorized local user to execute arbitrary code and escalate their level of privileges.

2018-03-22

Medium	CVE-2018-0540	Vendor: Vix project Software: VIX	Untrusted search path vulnerability in ViX version 2.21.148.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Medium	CVE-2018-0552	Vendor: Securebrain Software: Phishwall client	Untrusted search path vulnerability in The installer of PhishWall Client Firefox and Chrome edition for Windows Ver. 5.1.26 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

2018-03-13

Medium	CVE-2018-1437	Vendor: IBM Software: Notes	IBM Notes 8.5 and 9.0 could allow an attacker to execute arbitrary code on the system, caused by an error related to multiple untrusted search path. A local attacker could exploit this vulnerability to DLL hijacking to execute arbitrary code on the system or cause the application to crash. IBM X-Force ID: 139565.
Medium	CVE-2018-1435	Vendor: IBM Software: Notes	IBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attack. A remote attacker could trick a user to double click a malicious executable in an attacker-controlled directory, which could result in code execution. IBM X-Force ID: 139563.

2018-03-09

Medium

CVE-2018-7239

Vendor: Schneider-electric Software: Somove

A DLL hijacking vulnerability exists in Schneider Electric's SoMove Software and associated DTM software components in all versions prior to 2.6.2 which could allow an attacker to execute arbitrary code.

 

---

Copyright 2018, cxsecurity.com