Browse CVEs

HIGH 7.8 CVE-2017-13130 mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working directory, because it is setuid roo… Patrol No fix yet Fix from $1,9502017-08-23 HIGH 7.8 CVE-2017-6329 Symantec VIP Access for Desktop prior to 2.2.4 can be susceptible to a DLL Pre-Loading vulnerability. These types of issues occur when an application… Vip Access For Desktop after 2.2.3 Fix from $1,9502017-08-21 HIGH 7.8 CVE-2017-9646 An Uncontrolled Search Path Element issue was discovered in Solar Controls Heating Control Downloader (HCDownloader) Version 1.0.1.15 and prior. An u… Heating Control Downloader after 1.0.1.15 Fix from $1,9502017-08-14 HIGH 7.8 CVE-2017-9648 An Uncontrolled Search Path Element issue was discovered in Solar Controls WATTConfig M Software Version 2.5.10.1 and prior. An uncontrolled search p… Wattconfig M after 2.5.10.1 Fix from $1,9502017-08-14 HIGH 7.0 CVE-2017-9661 An Uncontrolled Search Path Element issue was discovered in SIMPlight SCADA Software version 4.3.0.27 and prior. The uncontrolled search path element… Scada after 4.3.0.27 Fix from $1,9502017-08-14 HIGH 7.8 CVE-2017-12653 360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any directory in the PATH, as demon… 360 Total Security after 9.0.0.1202 Fix from $1,9502017-08-07 HIGH 7.8 CVE-2017-2286 Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S), NF… Nfc Port Firmware after 5.5.0.6 Fix from $1,9502017-08-02 HIGH 7.8 CVE-2017-2287 Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL… Nfc Port Software Remover after 1.3.0.1 Fix from $1,9502017-08-02 HIGH 7.8 CVE-2017-2288 Untrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified … Lhaforge after 1.6.5 Fix from $1,9502017-08-02 HIGH 7.8 CVE-2017-1000010 Audacity 2.1.2 through 2.3.2 is vulnerable to Dll HIjacking in the avformat-55.dll resulting arbitrary code execution. Audacity after 2.3.2 Fix from $1,9502017-07-17 CRITICAL 9.8 CVE-2017-3090EPSS 8% Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loadi… Digital Editions after 4.5.4 Fix from $2,3002017-06-20 CRITICAL 9.8 CVE-2017-3092EPSS 8% Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loadi… Digital Editions after 4.5.4 Fix from $2,3002017-06-20 CRITICAL 9.8 CVE-2017-3097EPSS 7% Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loadi… Digital Editions after 4.5.4 Fix from $2,3002017-06-20 HIGH 7.3 CVE-2017-4987 In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user can load a maliciousl… Vnx2 Firmware Mitigation only Fix from $1,9502017-06-19 HIGH 8.4 CVE-2017-7884 In Adam Kropelin adk0212 APC UPS Daemon through 3.14.14, the default installation of APCUPSD allows a local authenticated, but unprivileged, user to … Apc Ups Daemon after 3.14.14 Fix from $1,9502017-06-16 HIGH 7.8 CVE-2017-2210 Untrusted search path vulnerability in PatchJGD (PatchJGD101.EXE) ver. 1.0.1 allows an attacker to gain privileges via a Trojan horse DLL in an unspe… Patchjgd Mitigation only Fix from $1,9502017-06-09 HIGH 8.8 CVE-2017-7966 A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary… Somachine Mitigation only Fix from $1,9502017-06-07 HIGH 7.0 CVE-2017-5176 A DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench (CCW). The following versions are affected: Connected Compone… Connected Components Workbench after 9.01.00 Fix from $1,9502017-05-19 HIGH 7.0 CVE-2017-6051 An Uncontrolled Search Path Element issue was discovered in BLF-Tech LLC VisualView HMI Version 9.9.14.0 and prior. The uncontrolled search path elem… Visualview Hmi after 9.9.14.0 Fix from $1,9502017-05-08 HIGH 7.8 CVE-2017-3012 Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking… Acrobat after 15.023.20070 Fix from $1,9502017-04-12 HIGH 7.8 CVE-2017-3013 Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking… Acrobat after 15.023.20070 Fix from $1,9502017-04-12 HIGH 7.8 CVE-2017-6033 A DLL Hijacking issue was discovered in Schneider Electric Interactive Graphical SCADA System (IGSS) Software, Version 12 and previous versions. The … Interactive Graphical Scada System after 12.0 Fix from $1,9502017-04-07 CRITICAL 9.8 CVE-2017-6517EPSS 46% Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted sy… Skype No fix yet Fix from $2,3002017-03-23 MEDIUM 6.7 CVE-2017-5565 Code injection vulnerability in Trend Micro Maximum Security 11.0 (and earlier), Internet Security 11.0 (and earlier), and Antivirus+ Security 11.0 (… Antivirus\+ after 11.1.1005 Fix from $1,6002017-03-21 MEDIUM 6.7 CVE-2017-5566 Code injection vulnerability in AVG Ultimate 17.1 (and earlier), AVG Internet Security 17.1 (and earlier), and AVG AntiVirus FREE 17.1 (and earlier) … Anti Virus Mitigation only Fix from $1,6002017-03-21 MEDIUM 6.7 CVE-2017-5567 Code injection vulnerability in Avast Premier 12.3 (and earlier), Internet Security 12.3 (and earlier), Pro Antivirus 12.3 (and earlier), and Free An… Free Antivirus after 12.3 Fix from $1,6002017-03-21 MEDIUM 6.7 CVE-2017-6417 Code injection vulnerability in Avira Total Security Suite 15.0 (and earlier), Optimization Suite 15.0 (and earlier), Internet Security Suite 15.0 (a… Free Security Suite after 15.0 Fix from $1,6002017-03-21 HIGH 7.2 CVE-2017-5161 An issue was discovered in Sielco Sistemi Winlog Lite SCADA Software, versions prior to Version 3.02.01, and Winlog Pro SCADA Software, versions prio… Winlog Lite after 3.01.10 Fix from $1,9502017-02-13 HIGH 7.5 CVE-2016-4526 ABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file in the package directory. Tracer Sc after 4.2.1134 Fix from $1,9502016-09-19 HIGH 7.2 CVE-2005-0457 Opera 7.54 and earlier on Gentoo Linux uses an insecure path for plugins, which could allow local users to gain privileges by inserting malicious lib… Opera Browser after 7.54 Fix from $1,9502005-05-02