Search vulnerabilities

Results 2,831

Export CSV
CVE-2017-2253

Untrusted search path vulnerability in Installer of Yahoo! Toolbar (for Internet explorer) v8.0.0.6 and earlier, with its timestamp prior to June 13, 2017, 18:18:55 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2017-2265

Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
CVE-2017-2266

Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
CVE-2017-2267

Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.5.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
CVE-2017-2268

Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.1.0.5.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
CVE-2017-2269

Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.2.0.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
CVE-2017-2270

Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable Ver.2.0.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
CVE-2017-2271

Untrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver.2.8.3.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2017-2272

Untrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver.3.2.2.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2017-2279

Untrusted search path vulnerability in Tween Ver1.6.6.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2017-2286

Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S), NFC Port Software Version 5.3.6.7 and earlier (for RC-S320, RC-S310/J1C, RC-S310/ED4C), PC/SC Activator for Type B Ver.1.2.1.0 and earlier, SFCard Viewer 2 Ver.2.5.0.0 and earlier, NFC Net Installer Ver.1.1.0.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
CVE-2017-2287

Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors
CVE-2017-2288

Untrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0 · 7.8 High EPSS 1.1% KEV · Not listed
Products
CVE-2017-2289

Untrusted search path vulnerability in Installer of Qua station connection tool for Windows version 1.00.03 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
CVE-2017-3090

Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of browser related library extensions in the installer plugin. A successful exploitation could lead to arbitrary code execution.

CVSS 3.0 · 9.8 Critical EPSS 8.5% KEV · Not listed
Vendors
Products
CVE-2017-3097

Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading functions in the installer plugin. A successful exploitation could lead to arbitrary code execution.

CVSS 3.0 · 9.8 Critical EPSS 7.1% KEV · Not listed
Vendors
Products
CVE-2017-3751

An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This could allow an attacker with local privileges to execute code with administrative privileges.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
CVE-2017-3757

An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks (not ThinkPads). This could allow an attacker with local privileges to execute code with administrative privileges.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Emc
CVE-2017-5147

An Uncontrolled Search Path Element issue was discovered in AzeoTech DAQFactory versions prior to 17.1. An uncontrolled search path element vulnerability has been identified, which may execute malicious DLL files that have been placed within the search path.

CVSS 3.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2017-5161

An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prior to Version 3.02.01. An uncontrolled search path element (DLL Hijacking) vulnerability has been identified. Exploitation of this vulnerability could give an attacker access to the system with the same level of privilege as the application that utilizes the malicious DLL.

CVSS 3.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors