Browse CVEs

HIGH 7.8 CVE-2024-10068 A vulnerability was found in OpenSight Software FlashFXP 5.4.0.3970. It has been classified as critical. Affected is an unknown function in the libra… Mitigation only Fix from $1,9502024-10-17 HIGH 7.3 CVE-2024-49390 Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x… Cyber Files 9.0+ Fix from $1,9502024-10-17 HIGH 7.3 CVE-2024-49391 Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x… Cyber Files 9.0+ Fix from $1,9502024-10-17 HIGH 7.8 CVE-2024-45710 SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privilege acc… Solarwinds Platform 2024.4+ Fix from $1,9502024-10-16 MEDIUM 5.3 CVE-2024-30117 A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances. Bigfix Platform 9.5.25 / 10.0.12+ Fix from $1,6002024-10-14 HIGH 7.8 CVE-2024-9046 A DLL hijack vulnerability was reported in Lenovo stARstudio that could allow a local attacker to execute code with elevated privileges. Starstudio 2020.3.12.34806+ Fix from $1,9502024-10-11 HIGH 7.8 CVE-2024-4131 A DLL hijack vulnerability was reported in Lenovo Emulator that could allow a local attacker to execute code with elevated privileges. Emulator 9.1.6+ Fix from $1,9502024-10-11 HIGH 7.8 CVE-2024-4132 A DLL hijack vulnerability was reported in Lenovo Lock Screen that could allow a local attacker to execute code with elevated privileges. Lock Screen 9.0.18+ Fix from $1,9502024-10-11 HIGH 7.8 CVE-2024-4089 A DLL hijack vulnerability was reported in Lenovo Super File that could allow a local attacker to execute code with elevated privileges. Superfile 2.4+ Fix from $1,9502024-10-11 HIGH 7.8 CVE-2024-4130 A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges. App Store 9.0.17+ Fix from $1,9502024-10-11 HIGH 7.8 CVE-2024-33582 A DLL hijack vulnerability was reported in Lenovo Service Framework that could allow a local attacker to execute code with elevated privileges. Mitigation only Fix from $1,9502024-10-11 HIGH 7.8 CVE-2024-33578 A DLL hijack vulnerability was reported in Lenovo Leyun that could allow a local attacker to execute code with elevated privileges. Mitigation only Fix from $1,9502024-10-11 HIGH 7.8 CVE-2024-33579 A DLL hijack vulnerability was reported in Lenovo Baiying that could allow a local attacker to execute code with elevated privileges. Mitigation only Fix from $1,9502024-10-11 HIGH 7.8 CVE-2024-33580 A DLL hijack vulnerability was reported in Lenovo Personal Cloud that could allow a local attacker to execute code with elevated privileges. Mitigation only Fix from $1,9502024-10-11 HIGH 7.8 CVE-2024-33581 A DLL hijack vulnerability was reported in Lenovo PC Manager AI intelligent scenario that could allow a local attacker to execute code with elevated … Mitigation only Fix from $1,9502024-10-11 HIGH 7.3 CVE-2024-47194 A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). vish2.exe in affected applications allows … Modelsim 2024.3+ Fix from $1,9502024-10-08 HIGH 7.3 CVE-2024-47195 A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). gdb.exe in affected applications allows a … Modelsim 2024.3+ Fix from $1,9502024-10-08 HIGH 7.3 CVE-2024-47196 A vulnerability has been identified in ModelSim (All versions < V2025.2), Questa (All versions < V2025.2). vsimk.exe in affected applications allows … Modelsim 2024.3+ Fix from $1,9502024-10-08 HIGH 7.3 CVE-2024-45246 Diebold Nixdorf – CWE-427: Uncontrolled Search Path Element No fix yet Fix from $1,9502024-10-06 MEDIUM 6.7 CVE-2024-6769 A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016,… Mitigation only Fix from $1,6002024-09-26 MEDIUM 5.5 CVE-2024-44168 A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7.… macOS 13.7 / 14.7+ Fix from $1,6002024-09-17 MEDIUM 6.7 CVE-2024-8766 Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) befor… Mitigation only Fix from $1,6002024-09-16 MEDIUM 6.5 CVE-2024-34016 Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) befor… Mitigation only Fix from $1,6002024-09-16 HIGH 7.8 CVE-2024-34153 Uncontrolled search path element in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable escalat… Raid Web Console Mitigation only Fix from $1,9502024-09-16 HIGH 7.8 CVE-2024-39613 Mattermost Desktop App versions <=5.8.0 fail to specify an absolute path when searching the cmd.exe file, which allows a local attacker who is able … Mattermost Desktop 5.9.0+ Fix from $1,9502024-09-16 HIGH 7.3 CVE-2024-20430 A vulnerability in Cisco Meraki Systems Manager (SM) Agent for Windows could allow an authenticated, local attacker to execute arbitrary code with el… Meraki Systems Manager 4.2.0+ Fix from $1,9502024-09-12 HIGH 7.8 CVE-2024-6510 Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijackin… Internet Security 24.1+ Fix from $1,9502024-09-12 MEDIUM 6.7 CVE-2024-8441 An uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September update allows a local authenticated attacker with admin… Endpoint Manager 2022+ Fix from $1,6002024-09-10 HIGH 7.8 CVE-2024-44107 DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escala… Workspace Control 10.18.99.0+ Fix from $1,9502024-09-10 MEDIUM 6.0 CVE-2024-45405 `gix-path` is a crate of the `gitoxide` project (an implementation of `git` written in Rust) dealing paths and their conversions. Prior to version 0.… Patch available Fix from $1,6002024-09-06